# \#pkce-flow

**URL:** https://devforum.zoom.us/tag/pkce-flow/21.md

[Latest](https://devforum.zoom.us/latest.md) · [Categories](https://devforum.zoom.us/categories.md) · [Tags](https://devforum.zoom.us/tags.md)

---

## [Cannot obtain the Access Token](https://devforum.zoom.us/t/cannot-obtain-the-access-token/82649)

<div class="topic-metadata">

**Author:** [@david](https://devforum.zoom.us/u/david)\
**Replies:** 8\
**Last updated:** [February 8, 2023, 10:28am UTC](https://devforum.zoom.us/t/cannot-obtain-the-access-token/82649 "2023-02-08T10:28:03Z")

</div>

I develop a client-side (browser, html/js) web application, which needs to use the ZoomAPI (users, contacts, meetings, etc.). I defined the oAuth private account-level application in the Marketplace. The redirection URL …

---

## [Bad request on In-client OAuth server side token request](https://devforum.zoom.us/t/bad-request-on-in-client-oauth-server-side-token-request/71650)

<div class="topic-metadata">

**Author:** [@auke.vanscheltinga](https://devforum.zoom.us/u/auke.vanscheltinga)\
**Replies:** 3\
**Last updated:** [July 5, 2022, 11:32pm UTC](https://devforum.zoom.us/t/bad-request-on-in-client-oauth-server-side-token-request/71650 "2022-07-05T23:32:18Z")

</div>

I generate the 32 bit code verifier client side function generateRandomString(length) { var text = ""; var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; for (var i = 0; i \< length;…

---

## [Zoom OAuth 2.0 Proof Key for Code Exchange (PKCE) Flow](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830)

<div class="topic-metadata">

**Author:** [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Replies:** 16\
**Last updated:** [March 7, 2022, 9:12pm UTC](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830 "2022-03-07T21:12:30Z")

</div>

Summary Zoom supports Proof of Key Code Exchange (PKCE), pronounced “Pixy”, industry - standard protocol for authorization when requesting user tokens. This offers better security by enabling clients to use a code challe…