Invalid access token, this access token is not supported as query parameter string #6
Description
As a part of our continuing efforts to improve the security of Zoom OAuth App Types using Authorization flow, Zoom removed the ability to set the access tokens, refresh tokens and revoke tokens in the URL query parameters. This change took effect on February 2023. To fix this, all the token values should be set in the Authorization header and not the HTTP query parameters.
The next error is thrown if the access-token is not set in the Authorization header:
error: {
statusCode: 401,
data: '{"code":124,"message":"Invalid access token, this access token is not supported as query parameter string."}
PR with patch: #5
Zoom Dev Forum: https://devforum.zoom.us/t/security-update-no-token-values-in-url-query-parameters/78782