# Invalid Token with Authorization API

**URL:** <https://community.auth0.com/t/invalid-token-with-authorization-api/8337>\
**Category:** Get Help\
**Tags:** invalid\_token, authorization-extens\
**Created:** [September 29, 2017, 1:47am UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337 "2017-09-29T01:47:42Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![michael\_kitzman](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@michael\_kitzman](https://community.auth0.com/u/michael_kitzman)\
**Post date:** [September 29, 2017, 1:47am UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337/1 "2017-09-29T01:47:42Z")

</div>

I need to be able to access the Authroization Extension API in my Auth0 rules, and I believe I have to create a non-interactive client, login to generate a token, and use that token to access the API.

I have created a non-interactive client in Auth0, and granted the appropriate permissions for this client to access the `auth0-authorization-extension-api`. I then believe I am supposed to generate a bearer token from Auth0, which succeeds for me.

`POST https://mydomain.auth0.com/oauth/token` with the client payload information returns my token.

However, when I then attempt to use this token to access the authroization extension api, I get the a **401 Unauthorized** message with the error `Invalid Token`. This token appears to be valid to me.

What else am I missing here?

---

<div class="post-metadata">

**Author:** ![jorisbasiglio](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jorisbasiglio/32/10380_2.png) [@jorisbasiglio](https://community.auth0.com/u/jorisbasiglio)\
**Post date:** [September 29, 2017, 2:47am UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337/2 "2017-09-29T02:47:40Z")

</div>

Having the same issue here,  
I’m thinking it is an issue on Auth0 side since it suddenly stopped working for us

---

<div class="post-metadata">

**Author:** ![alexandr.krylovskiy](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/alexandr.krylovskiy/32/7314_2.png) [@alexandr.krylovskiy](https://community.auth0.com/u/alexandr.krylovskiy)\
**Post date:** [September 29, 2017, 8:34pm UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337/3 "2017-09-29T20:34:47Z")

</div>

There is an incident report which seems to be capturing this: [https://auth0.statuspage.io/incidents/t7zjk21cck52](https://auth0.statuspage.io/incidents/t7zjk21cck52)

We have the same issue on the EU preview.

---

<div class="post-metadata">

**Author:** ![jorisbasiglio](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jorisbasiglio/32/10380_2.png) [@jorisbasiglio](https://community.auth0.com/u/jorisbasiglio)\
**Post date:** [September 29, 2017, 2:47am UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337/4 "2017-09-29T02:47:40Z")

</div>

Having the same issue here,  
I’m thinking it is an issue on Auth0 side since it suddenly stopped working for us

---

<div class="post-metadata">

**Author:** ![michael\_kitzman](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@michael\_kitzman](https://community.auth0.com/u/michael_kitzman)\
**Post date:** [October 2, 2017, 9:28pm UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337/5 "2017-10-02T21:28:46Z")

</div>

The issue is fixed now! Thank you very much for finding this!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:56am UTC](https://community.auth0.com/t/invalid-token-with-authorization-api/8337/6 "2018-03-02T05:56:44Z")

</div>