# Zoom Meeting SDK Authorization code issue

**URL:** <https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488>\
**Category:** Meeting SDK\
**Tags:** s2s-oauth\
**Created:** [April 15, 2025, 5:20am UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488 "2025-04-15T05:20:22Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![eshwar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/eshwar/32/65367_2.png) [@eshwar](https://devforum.zoom.us/u/eshwar)\
**Post date:** [April 15, 2025, 5:20am UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/1 "2025-04-15T05:20:22Z")

</div>

Hi Zoom Dev Team,

This is Eshwar from Verix. We’re encountering an issue with the Zoom Meeting SDK when attempting to obtain an access token using the authorization code provided via the SDK’s `onAuthorized` callback.

### Issue Description:

When we use the authorization code returned from the SDK method `ZoomSdk.ZoomSdk.onAuthorized`, Zoom returns the following error when we try to exchange it for an access token:

**Error:** `{ "reason": "Invalid authorization code", "error": "invalid_grant" }`

However, when we manually generate the authorization code using the Zoom OAuth API (`https://zoom.us/oauth/authorize`), and then use it to call the token endpoint (`https://zoom.us/oauth/token`), everything works as expected.

### SDK Details:

- SDK: [Zoom Meeting SDK](https://appssdk.zoom.us/)
- Version: `0.16.22`
- Relevant Methods:
  - [`ZoomSdk.ZoomSdk.authorize`](https://appssdk.zoom.us/classes/ZoomSdk.ZoomSdk.html#authorize)
  - [`ZoomSdk.ZoomSdk.onAuthorized`](https://appssdk.zoom.us/classes/ZoomSdk.ZoomSdk.html#onAuthorized)

From the `onAuthorized` callback, we receive the following:

- `code`
- `redirect_url`

But using the `code` from this callback in the token request consistently fails with an `invalid authorization code` error.

This was working fine until recently and suddenly started breaking. We have not made any changes from our side and believe there might be some changes from Zoom. We’d appreciate any guidance to help resolve this issue. Let us know if more details are needed.

cc: @sajal, @Manishsingh

---

<div class="post-metadata">

**Author:** ![dominic.light](https://avatars.discourse-cdn.com/v4/letter/d/f475e1/32.png) [@dominic.light](https://devforum.zoom.us/u/dominic.light)\
**Post date:** [April 15, 2025, 8:48am UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/2 "2025-04-15T08:48:12Z")

</div>

We are also having the same issue with our app, which uses in-client OAuth (`authorize` / `onAuthorized`). From our logs we can see the last successful authentication was the 11th of April, but we started seeing sporadic `invalid_grant` errors from the 9th of April. We are using `@zoom/appssdk@0.16.27`.

---

<div class="post-metadata">

**Author:** ![eshwar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/eshwar/32/65367_2.png) [@eshwar](https://devforum.zoom.us/u/eshwar)\
**Post date:** [April 22, 2025, 3:43am UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/3 "2025-04-22T03:43:36Z")

</div>

Hi Zoom Dev Team,

Any update on this issue, we are blocked on this.

Thanks & Regards,  
Eshwar Reddy Thummala

---

<div class="post-metadata">

**Author:** ![eshwar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/eshwar/32/65367_2.png) [@eshwar](https://devforum.zoom.us/u/eshwar)\
**Post date:** [April 29, 2025, 4:12am UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/4 "2025-04-29T04:12:50Z")

</div>

@elisa.zoom, Can you help me with this.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [April 29, 2025, 1:52pm UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/5 "2025-04-29T13:52:38Z")

</div>

Hi @eshwar  
I will send you a DM to take a close look into this.  
Please follow up accordingly

---

<div class="post-metadata">

**Author:** ![Manishsingh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/manishsingh/32/50470_2.png) [@Manishsingh](https://devforum.zoom.us/u/Manishsingh)\
**Post date:** [April 29, 2025, 6:21pm UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/6 "2025-04-29T18:21:52Z")

</div>

Hi Elisa, could you please look into this issue on priority? It’s a blocker for our business continuity and the upcoming feature release

---

<div class="post-metadata">

**Author:** ![Hemanth](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hemanth/32/68895_2.png) [@Hemanth](https://devforum.zoom.us/u/Hemanth)\
**Post date:** [May 2, 2025, 12:20am UTC](https://devforum.zoom.us/t/zoom-meeting-sdk-authorization-code-issue/131488/7 "2025-05-02T00:20:38Z")

</div>

Hello Zoom team - I have an app (In Development) that was working just fine until about a week or so ago. Similar to Eshwar, all of a sudden, all calls to the oauth/token endpoint are returning { “reason”: “Invalid authorization code”, “error”: “invalid\_grant” }. No code changes were made to the app (the code has stayed the same for close to a month). Please help!
