Zoom Meeting SDK Authorization code issue

Hi Zoom Dev Team,

This is Eshwar from Verix. We’re encountering an issue with the Zoom Meeting SDK when attempting to obtain an access token using the authorization code provided via the SDK’s onAuthorized callback.

Issue Description:

When we use the authorization code returned from the SDK method ZoomSdk.ZoomSdk.onAuthorized, Zoom returns the following error when we try to exchange it for an access token:

Error: { "reason": "Invalid authorization code", "error": "invalid_grant" }

However, when we manually generate the authorization code using the Zoom OAuth API (https://zoom.us/oauth/authorize), and then use it to call the token endpoint (https://zoom.us/oauth/token), everything works as expected.

SDK Details:

From the onAuthorized callback, we receive the following:

  • code
  • redirect_url

But using the code from this callback in the token request consistently fails with an invalid authorization code error.

This was working fine until recently and suddenly started breaking. We have not made any changes from our side and believe there might be some changes from Zoom. We’d appreciate any guidance to help resolve this issue. Let us know if more details are needed.

cc: @sajal, @Manishsingh

1 Like

We are also having the same issue with our app, which uses in-client OAuth (authorize / onAuthorized). From our logs we can see the last successful authentication was the 11th of April, but we started seeing sporadic invalid_grant errors from the 9th of April. We are using @zoom/appssdk@0.16.27.

Hi Zoom Dev Team,

Any update on this issue, we are blocked on this.

Thanks & Regards,
Eshwar Reddy Thummala

@elisa.zoom, Can you help me with this.

Hi @eshwar
I will send you a DM to take a close look into this.
Please follow up accordingly

Hi Elisa, could you please look into this issue on priority? It’s a blocker for our business continuity and the upcoming feature release

Hello Zoom team - I have an app (In Development) that was working just fine until about a week or so ago. Similar to Eshwar, all of a sudden, all calls to the oauth/token endpoint are returning { “reason”: “Invalid authorization code”, “error”: “invalid_grant” }. No code changes were made to the app (the code has stayed the same for close to a month). Please help!