# Getting intermittent authorization code errors

**URL:** <https://devforum.okta.com/t/getting-intermittent-authorization-code-errors/5839>\
**Category:** Questions\
**Created:** [August 1, 2019, 2:29pm UTC](https://devforum.okta.com/t/getting-intermittent-authorization-code-errors/5839 "2019-08-01T14:29:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mcandre](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/mcandre/32/1274_2.png) [@mcandre](https://devforum.okta.com/u/mcandre)\
**Post date:** [August 1, 2019, 2:29pm UTC](https://devforum.okta.com/t/getting-intermittent-authorization-code-errors/5839/1 "2019-08-01T14:29:26Z")

</div>

I am able to use Okta in my applications. However, when I try ti interact with Okta via Postman in order to automate test HTTP calls, then Okta responds with HTTP status 400, complaining about invalid / expires authorization codes. Any idea why this happening?

Happens about 80% of the time now. This never happened last month. This happens with dev-#####.okta.com servers. I know my Mac system clock is NTP synced, for what it’s worth.

So strange that this only happens with Postman, not with Chrome. Any idea?

---

<div class="post-metadata">

**Author:** ![dragos](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/dragos/32/1313_2.png) [@dragos](https://devforum.okta.com/u/dragos)\
**Post date:** [August 5, 2019, 12:54am UTC](https://devforum.okta.com/t/getting-intermittent-authorization-code-errors/5839/2 "2019-08-05T00:54:55Z")

</div>

Hi @mcandre

When doing [Authorization Code Flow](https://developer.okta.com/docs/guides/implement-auth-code/overview/), the authorization code can be used only once and will expire after 60 seconds if not used.

If this does not apply to your testing use-case, can you please check that you are using the same authorization server for both issuing the authorization code and exchanging the authorization code for JWT tokens?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 17, 2024, 11:53pm UTC](https://devforum.okta.com/t/getting-intermittent-authorization-code-errors/5839/3 "2024-01-17T23:53:39Z")

</div>

Closed on January 17, 2024, 11:53pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.
