# Zoom response: {"reason":"Invalid request : Redirect URI mismatch.","error":"invalid\_grant"}

**URL:** <https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528>\
**Category:** Authentication\
**Created:** [March 9, 2022, 5:41pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528 "2022-03-09T17:41:15Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 9, 2022, 5:41pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/1 "2022-03-09T17:41:15Z")

</div>

I am getting this result when I try to authenticate via authorization code.  
I have updated the allow list on the app and it was working fine until today.  
Any ideas?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 11, 2022, 12:44am UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/2 "2022-03-11T00:44:06Z")

</div>

Hi @dilyan.georgiev

Thanks for reaching out!  
Can you please make sure that your Redirect URL matches with the one added to the Allow List?  
Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 11, 2022, 8:40am UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/3 "2022-03-11T08:40:08Z")

</div>

It happens when I run this [OAuth with Zoom](https://marketplace.zoom.us/docs/guides/auth/oauth#step-2-request-access-token)  
redirect\_uri is usually empty because it is a request from my integration service. Should it be filled?  
It has been working two days ago!

---

<div class="post-metadata">

**Author:** ![timothy.ji](https://avatars.discourse-cdn.com/v4/letter/t/e47774/32.png) [@timothy.ji](https://devforum.zoom.us/u/timothy.ji)\
**Post date:** [March 11, 2022, 10:20am UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/4 "2022-03-11T10:20:17Z")

</div>

Hi, i have a similar question, but error happened when refresh token, can you help to check this. and also i’m not sure why it’s disappeared after i edit some times.

[https://devforum.zoom.us/t/invalid-token-invalid-grant/64681](https://devforum.zoom.us/t/invalid-token-invalid-grant/64681)

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 11, 2022, 9:33pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/5 "2022-03-11T21:33:49Z")

</div>

Hi @timothy.ji  
I can not see your post! could you share more about your issue here!  
🙂

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 11, 2022, 9:34pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/6 "2022-03-11T21:34:34Z")

</div>

Hi @dilyan.georgiev  
Yes, you should have a redirect url and add i t to the Allow list.  
Let me know if that does the trick! 😉

---

<div class="post-metadata">

**Author:** ![sherrysid786](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/sherrysid786/32/35909_2.png) [@sherrysid786](https://devforum.zoom.us/u/sherrysid786)\
**Post date:** [March 12, 2022, 8:59am UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/8 "2022-03-12T08:59:41Z")

</div>

> [@timothy.ji](#):
>
> refresh token

> [@timothy.ji](#):
>
> Hi, i have a similar question, but error happened when refresh token, can you help to check this. and also i’m not sure why it’s disappeared after i edit some times.
> 
> [https://devforum.zoom.us/t/invalid-token-invalid-grant/64681](https://devforum.zoom.us/t/invalid-token-invalid-grant/64681)

error related to refresh token can occur  
find this useful  
[https://devforum.zoom.us/t/invalid-token-error-message-when-trying-to-refresh-oauth-token/13363](https://myuniversalremotecodes.com/onn-universal-remote-codes/)

---

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 13, 2022, 11:21pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/9 "2022-03-13T23:21:35Z")

</div>

It does not work! I am sending the request from my BE service, I attach the authorization code and the redirect url listed in the OAuth allow list defined in the app’s credentials. The result is the same.

---

<div class="post-metadata">

**Author:** ![timothy.ji](https://avatars.discourse-cdn.com/v4/letter/t/e47774/32.png) [@timothy.ji](https://devforum.zoom.us/u/timothy.ji)\
**Post date:** [March 14, 2022, 1:20am UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/10 "2022-03-14T01:20:09Z")

</div>

Hi, can you help to show this question? i’m also not able to see it now, i’m not sure why it been hidden. i have some important info in this request and i haven’t keep it on my side. i have received this email.

* * *

Hello,

Our automated spam filter, [**Akismet**](https://akismet.com/), has temporarily hidden [**your post**](https://devforum.zoom.us/t/invalid-token-invalid-grant/64681/1) in _Invalid Token! invalid\_grant_ for review.

A staff member will review your post soon, and it should appear shortly.

We apologize for the inconvenience.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 15, 2022, 10:00pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/11 "2022-03-15T22:00:44Z")

</div>

hey @dilyan.georgiev  
Are you adding the redirect url to the allow list??

---

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 15, 2022, 10:57pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/12 "2022-03-15T22:57:11Z")

</div>

Yes! I tried every single url from the Allow list as redirect but the result is still the same on our development environment.  
However it works on prod without the return\_url query parameter.

---

<div class="post-metadata">

**Author:** ![Lynk-Developer](https://avatars.discourse-cdn.com/v4/letter/l/977dab/32.png) [@Lynk-Developer](https://devforum.zoom.us/u/Lynk-Developer)\
**Post date:** [March 16, 2022, 7:46pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/13 "2022-03-16T19:46:23Z")

</div>

Is the localhost domain on the `redirect_uri` field in Zoom Marketplace App? If you recently moved the app to production and that production url/domain name is in the `redirect_uri` field for you app. Example: “[yourproductionapp.com](http://yourproductionapp.com)”

But when running locally, you are running from a different host, example:  
localhost:8088. Then you will always get that error.

I have to apps: Fea (front end app) and Bea (back end app). Fea is listed as redirect\_uri domain. Bea, my backend app, cannot make that request to ZoomApi to get the tokens because she is not on the domain of the redirect\_uri declared in my Zoom Marketplace app. So I make all requests from Fea and then proxy stuff to Bea when I need to.

Suggested Architecture: Fea and Bea.

_ **Fea** _:

- login/authentication calls proxied to Bea
- Zoom Api calls for authentication: { code, tokens }
- embedded ZoomMtg object/player
- cookies
- UI

**Bea** :

- JWT calls to ZoomApi
- internal api calls (db, internal services)
- session management

Hope this helps!?

---

<div class="post-metadata">

**Author:** ![Lynk-Developer](https://avatars.discourse-cdn.com/v4/letter/l/977dab/32.png) [@Lynk-Developer](https://devforum.zoom.us/u/Lynk-Developer)\
**Post date:** [March 16, 2022, 7:48pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/14 "2022-03-16T19:48:18Z")

</div>

> [@Zoom response: {"reason":"Invalid request : Redirect URI mismatch.","error":"invalid\_grant"}](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/13):
>
> Is the localhost domain on the redirect\_uri field in Zoom Marketplace App? If you recently moved the app to production and that production url/domain name is in the redirect\_uri field for you app. Example: “[yourproductionapp.com](http://yourproductionapp.com)” But when running locally, you are running from a different host, example: localhost:8088. Then you will always get that error. I have to apps: Fea (front end app) and Bea (back end app). Fea is listed as redirect\_uri domain. Bea, my backend app, cannot make th…

---

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 17, 2022, 12:04pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/15 "2022-03-17T12:04:21Z")

</div>

I am not running it locally. I run it on test environment and there are redirect urls and credentials for development purposes. The problems happens there but not on production.

---

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 18, 2022, 11:35am UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/16 "2022-03-18T11:35:51Z")

</div>

Here is an update,  
The authentication worked when I added the query parameters used for the first redirect url. So the comparison is not only the base url from the configuration but also the query parameters which differ from user to user.  
That’s something that needed clarifying.  
Thank you anyways!  
Best regards

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 18, 2022, 4:31pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/17 "2022-03-18T16:31:56Z")

</div>

Thank you for the update @dilyan.georgiev  
So you were only missing the redirect uri when making the request in your query parameters?

---

<div class="post-metadata">

**Author:** ![dilyan.georgiev](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dilyan.georgiev/32/35118_2.png) [@dilyan.georgiev](https://devforum.zoom.us/u/dilyan.georgiev)\
**Post date:** [March 18, 2022, 4:40pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/18 "2022-03-18T16:40:19Z")

</div>

No, my redirect url was there but the query parameters were missing and I didnt know that they were necessary for every call.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 18, 2022, 4:42pm UTC](https://devforum.zoom.us/t/zoom-response-reason-invalid-request-redirect-uri-mismatch-error-invalid-grant/65528/19 "2022-03-18T16:42:35Z")

</div>

@dilyan.georgiev  
Ah I see…  
Thanks for the update and I am glad to see that its working now!
