# Zoom Cloud Recordings API Token Expiry

**URL:** <https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948>\
**Category:** Authentication\
**Created:** [May 13, 2022, 4:24pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948 "2022-05-13T16:24:17Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [May 13, 2022, 4:24pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/1 "2022-05-13T16:24:17Z")

</div>

what’s the best/most updated documentation for the Zoom Cloud Recordings API token? We’re seeing very short expiration times of the tokens (multiple times within one day), which leads me to think we probably haven’t found our way to the proper documentation.

refresh token seems to not be working properly to get new access\_token as it is supposed to be

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [May 13, 2022, 7:48pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/2 "2022-05-13T19:48:22Z")

</div>

Hi @josh5 ,

Here is the most up to date Cloud Recordings API docs: [Zoom Meeting API](https://marketplace.zoom.us/docs/api-reference/zoom-api/methods#tag/Cloud-Recording)

- Are you specifically referring to the download\_access\_token?

- Can you please identify which specific endpoints and share your API request/response/screenshots with sensitive information obscured?

Thank you!

---

<div class="post-metadata">

**Author:** ![aaronchildres9](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/aaronchildres9/32/37667_2.png) [@aaronchildres9](https://devforum.zoom.us/u/aaronchildres9)\
**Post date:** [May 16, 2022, 4:43pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/3 "2022-05-16T16:43:52Z")

</div>

Hi Gianni. Thanks for your reply.

I am working with Josh and let me continue this ticket if you don’t mind.

Here is the scenario.  
Recently, we’ve developed the zoom app which allows to download the cloud recordings of our account inside our pwa app. We’ve successfully managed to connect the zoom app via OAuth2 and was be able to down the recordings with the given access\_token. After a certain period of time, the access\_token expires as it is and then the pwa app would try to retrieve the new access\_token with the refresh\_token and save them into the db. Seems everything works fine till this point.  
But the something wrong happened when trying to connect the zoom app again afterwards. The new access\_token and refresh token didn’t work to connect to the zoom app and couldn’t get the recordings. All we can do is let the user authenticate the zoom again which is not the best user experience.

- Are you specifically referring to the download\_access\_token?  
Yes, I am referring to the access\_token for downloading the zoom cloud recordings

- Can you please identify which specific endpoints and share your API request/response/screenshots with sensitive information obscured?

API endpoint  
[https://zoom.us/oauth/token?grant\_type=refresh\_token](https://zoom.us/oauth/token?grant_type=refresh_token)

Response

```auto
{
    "reason": "Invalid Token!",
    "error": "invalid_grant"
}

```

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [May 20, 2022, 5:17pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/4 "2022-05-20T17:17:12Z")

</div>

Hey @gianni.zoom !

Following up here after Aaron’s response. We are working on figuring this out together. Below is a screenshot of our oauth authorize requests and responses.

As Aaron mentioned above, the initial connection works great, but after the access token expires, our app tries to retrieve a new access token with the refresh token which then gets an invalid token/grant error.

Is this a known issue? Or Is it due to our implementation? (if so, what docs should we be referencing)

Thanks so much.  
-josh

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [May 20, 2022, 5:20pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/5 "2022-05-20T17:20:45Z")

</div>

Heads up, this discussion forum won’t allow me to send images. I get an error saying embedding images in a post isn’t allowed.

So here are links to the two screenshots:  
Screenshot 1: [Screen Shot 2022-05-20 at 10.08.42.png - Google Drive](https://drive.google.com/file/d/1AV6Hl5vBGleYFySCE7mYTdXKltPIwUtC/view?usp=sharing)  
Screenshot 2: [Screen Shot 2022-05-20 at 10.07.44.png - Google Drive](https://drive.google.com/file/d/1-_3RdqMcHYau2rr0i8GG0mPr65RydCM4/view?usp=sharing)

-josh

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [May 23, 2022, 2:50pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/6 "2022-05-23T14:50:27Z")

</div>

Hi @josh5 @aaronchildres9 ,

Ahh I see, thank you for this information. There seems to be an issue with the token tolerance and this is not expected behavior. Can you open a [support ticket](https://devsupport.zoom.us/hc/en-us) with the following please?:

- production client id
- full API request/responses w/token
- account id
- link to this forum post

Gianni

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [May 24, 2022, 4:45am UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/7 "2022-05-24T04:45:45Z")

</div>

Thanks for the instruction @gianni.zoom

I went ahead and filed the support ticket with the requested information.

Here is the link: [https://support.zoom.us/hc/en-us/requests/14411952](https://support.zoom.us/hc/en-us/requests/14411952)

-josh

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [June 2, 2022, 10:40pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/8 "2022-06-02T22:40:54Z")

</div>

Hey @gianni.zoom I filed the ticket and have escalated. I still have not received any response. May we please get some assistance?  
-josh

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [June 3, 2022, 5:11pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/9 "2022-06-03T17:11:17Z")

</div>

Hi @josh5 , sure thing. I’ll see if I can locate it. What’s your ticket number?

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [June 10, 2022, 7:05pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/10 "2022-06-10T19:05:28Z")

</div>

Ticket ID: #14411952

Link was provided in one of my previous comments: [https://support.zoom.us/hc/en-us/requests/14411952](https://support.zoom.us/hc/en-us/requests/14411952)

When can I expect a response? It’s been 4 weeks now.  
-josh

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [June 10, 2022, 7:28pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/11 "2022-06-10T19:28:19Z")

</div>

Hey Gianni. I just got an email that my last response to you was hidden because it was marked as spam. My ticket number is: 14411952

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [June 13, 2022, 5:45pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/12 "2022-06-13T17:45:46Z")

</div>

Hi @josh5 ,

Ahh I see it now. I’ll connect with the person who’s handling it so they can follow up with you asap. Apologies for the delay–we recently had a very large queue.

Best,  
Gianni

---

<div class="post-metadata">

**Author:** ![josh5](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/josh5/32/37664_2.png) [@josh5](https://devforum.zoom.us/u/josh5)\
**Post date:** [June 13, 2022, 7:18pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/13 "2022-06-13T19:18:41Z")

</div>

Thanks @gianni.zoom. I look forward to learning the best next steps from you early this week.  
-josh

---

<div class="post-metadata">

**Author:** ![JonStewart](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jonstewart/32/36192_2.png) [@JonStewart](https://devforum.zoom.us/u/JonStewart)\
**Post date:** [June 16, 2022, 5:49pm UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/14 "2022-06-16T17:49:48Z")

</div>

Hi Josh, I’m pasting a link (below) from our server-to-server OAuth docs on the Zoom REST API. I’m from the Zoom Apps team, and can offer a couple ways I’ve debugged issues like this:

1. Sanity check to make sure you’re calling the token refresh endpoint correctly by testing your implementation with a very fresh/new refresh token
2. Make sure your app is actually persisting the refresh token (eg: shutting down Docker can cause problems here; at least it often does for our ‘reference’ apps

> **[Create a Server-to-Server OAuth App](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app/)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [July 27, 2022, 7:14am UTC](https://devforum.zoom.us/t/zoom-cloud-recordings-api-token-expiry/68948/15 "2022-07-27T07:14:33Z")

</div>

@josh5 , did Jon’s guidance or the Support Engineering staff help to resolve this?
