slack error "invalid_code" after sending request to oauth.access url

Question

I am trying to authenticate my app with Slack. It was working perfectly fine for a few days, but now it's throwing me an error

invalid_code

const requestBody = qs.stringify({
    code: code,
    redirect_uri: redirect_uri,
    client_id: client_id,
    client_secret: client_secret
  });

  await axios
    .post(url, requestBody, config).
then(server => console.log(server)).catch(err => console.log(err))

Response from server: { ok: false, error: 'invalid_code' }

The code I get is in this format. code=303414024726.805164905556.526d546072e9b2408e0743f42ca3bb5843553a6c3b930b1de2c1e31847b25448

I think this is JWT token but I am not sure.

Any help would be appreciated.

Getting the same issue on and off. Were you getting it only in development or also in production? — Pier-Luc Gendreau, Jun 02 '20 at 01:20
one of our customers used to have the same issue, idk what's the reason behind this, seems like slack related cause we do NO modification to the code accepted, just passing it to get the token, on the second attempt it's succeeded, very wired anyway — hdmiimdh, Mar 08 '21 at 12:43
I ran into the same problem. For me, the solution was to send form-data instead of json in the request. — Daniel Kent, Jun 21 '21 at 19:34
I am facing the same issue, is it necessary to make app public, so that we will not receive this `invalid_code` error? — Pratik, Aug 05 '21 at 10:59
I couldn't find a proper solution to this. It just started working again on its own, as if it was consumed or something. — Sumair Baloch, Aug 12 '21 at 03:24

score 0 · Answer 1 · answered Jul 10 '22 at 17:22

This is how i made it work

 let slackUrl = `https://slack.com/api/oauth.v2.access`;
let client_id = process.env.SLACK_CLIENT_ID;
let client_secret = process.env.SLACK_CLIENT_SECRET;
let details = {
    code,
    client_id,
    client_secret
}
var formBody = [];
for (var property in details) {
    var encodedKey = encodeURIComponent(property);
    var encodedValue = encodeURIComponent(details[property]);
    formBody.push(encodedKey + "=" + encodedValue);
}
formBody = formBody.join("&");

const _headers = {
    'Content-Type': 'application/x-www-form-urlencoded'
};

let config = {
    method: 'POST',
    url: slackUrl,
    data: formBody,
    headers: _headers
};

let installation = await axios(config);

score 0 · Answer 2 · answered Jul 26 '23 at 22:07

Ran into the same issue where it worked then kept getting "invalid code" error in the response. Turns out, if there is already an OAuth token for the app/workspace, it will throw this error.

To fix this, go to "OAuth & Permissions" in the App management part of Slack, and revoke all your tokens (at the bottom of page.). On the next request, your request will return a new token.

slack error "invalid_code" after sending request to oauth.access url

2 Answers2