Zoho CRM API Error AUTHENTICATION_FAILURE "Authentication failed"

I am trying to integrate a web app with the Zoho CRM API. Following the instructions in the API docs, I did the following steps:

1) Went to Zoho Developer console (https://accounts.zoho.com/developerconsole) to register my client application.

It is a "Self client" app, so I just put a dummy Client Domain("testing"), and dummy Authorized redirect URIs("http://www.testing.com").

2) Again from the Zoho Developer Console, I clicked on the "..." options button for the client I registered and selected "Self client".

In the menu that appears I entered the scope "ZohoCRM.modules.ALL,ZohoCRM.settings.ALL", selected 10 minutes for expiry, and clicked "View Code".

3) Leaving the View Code window open, I copied the code and sent a Postman request like this:

https://accounts.zoho.com/oauth/v2/token?grant_type=authorization_code&client_id=1000.ODLWXXXXXXXXX4E0ZU03TAKH&client_secret=e3e3a6843e98fXXXXXXXXXXXX82276e&redirect_uri=http://www.testing.com&code=1000.0a3419XXXXXXXXXXXfc81032b2d

The response I got was:

{

"access_token": "1000.4cb45da9219eXXXXXXXXXXXXXXXXXXb380e4761ab5dd7795f67e",

"refresh_token": "1000.70d5acd7986XXXXXXXXXXXXXXXX7e864253c84b177b338cbb51b13",

"api_domain": "https://www.zohoapis.com",

"token_type": "Bearer",

"expires_in": 3600

}

4) When I try to send any api requests, GET or POST, Leads or Contacts or Accounts, where my request looks something like:

GET https://www.zohoapis.com/crm/v2/Leads

Authorization: Zoho-oauthtoken 1000.4cb45da9219eXXXXXXXXXXXXXXXXXXb380e4761ab5dd7795f67e

I always get the same response:

{

"code": "AUTHENTICATION_FAILURE",

"details": {},

"message": "Authentication failed",

"status": "error"

}

If I change any part of the token so it is wrong, or if I try to change the request url to www.zohoapis.eu or www.zohoapis.in instead of www.zohoapis.com I get the following response instead:

{

"code": "INVALID_TOKEN",

"details": {},

"message": "invalid oauth token",

"status": "error"

}

5) When I send a request to refresh the token like so:

https://accounts.zoho.com/oauth/v2/token?refresh_token=1000.70d5acd79860afXXXXXXXXXXXXXXXXX7e864253c84b177b338cbb51b13&client_id=1000.OXXXXXXXXXXXXU03TAKH&client_secret=e3e3a6843XXXXXXXXXXXXXXXXXd1fdd82276e&grant_type=refresh_token

I get back a new access token but trying to make api calls with the new token gives the same AUTHENTICATION_FAILURE response

{

"access_token": "1000.42a2d57506XXXXXXXXXXXXXXXXXXXXXXXdc33fbb5121028",

"api_domain": "https://www.zohoapis.com",

"token_type": "Bearer",

"expires_in": 3600

}

Please help, I'm not sure what is going wrong.

Zoho Desk Resources

Desk Community Learning Series
Digest
Functions
Meetups
Kbase
Resources
Glossary
Desk Marketplace
MVP Corner
Word of the Day

Sticky Posts
Client Script | Update - Introducing Commands in Client Script!
Have you ever wished you could trigger Client Script from contexts other than just the supported pages and events? Have you ever wanted to leverage the advantage of Client Script at your finger tip? Discover the power of Client Script - Commands! Commands
Kaizen #165 : How to call Zoho CRM APIs using Client Script
Welcome back to another exciting Client Script post! In this post, we will discuss one of the most frequently asked questions: How do you call Zoho CRM APIs from Client Scripts? In this kaizen post, 1. Ways to make calls to Zoho CRM APIs using Client
Kaizen#162 : Add Tags and Open Pre-filled Email Drafts via Client Scripts
Hello everyone! Welcome to another informative Kaizen post. In this post, let us see how to accomplish the following using Client Script. 1. How to auto-tag a record based on field update? 2. How to Open a pre-filled email draft This post will provide
Extension Pointers - JS SDK series #4: Managing data from a widget using ZOHO.CRM.HTTP
Handling and managing the data between two applications is a major factor for an efficient business. There are a variety of ways to handle data between Zoho CRM and other third-party applications. You can use deluge CRM tasks, create connectors, use API
Kaizen #152 - Client Script Support for the new Canvas Record Forms
Hello everyone! Have you ever wanted to trigger actions on click of a canvas button, icon, or text mandatory forms in Create/Edit and Clone Pages? Have you ever wanted to control how elements behave on the new Canvas Record Forms? This can be achieved