Polling Request

required  

Should be passed with the constant value device_token.

code

required

The device_code you have received when you made the initiation request.

slow_down

Two polling requests have come within 30 seconds. The device must maintain a request rate of only one request per 30 seconds.

authorization_pending

The user hasn't entered the user_code in the verification_url and granted the requested permissions.

other_dc

The user granted permission, but the user's datacenter is different from the device's datacenter. The datacenter location of the user will also be included in the response (user_location). Subsequent polling requests from the device have to be sent to this datacenter. See Multi DC

access_denied

The user has denied permission.

expired

The user hasn't done any action within the expires_in duration mentioned in the response of the initiation request.

access_token

An authorized key that can be used by your application to access the protected resource (mentioned in the scope) on behalf of the user. The application can make API requests to the resource using this access token for up to an hour after the creation of the token.

refresh_token   

A special token that can be used by your application to refresh the access token once it is expired. The refresh token will be included in the response if you have passed the parameter access_type with the value offline when making the Initiation request (for the first time).

Note: If you want to get a refresh token every time the app requests for an access token, then include the parameters access_type=offline and prompt=consent when making the initiation request.

api_domain   

The domain the app needs to make service API requests to.

token_type

Indicates the type of access token that is generated and how it must be passed when making API requests to access protected resources. The token type that is used in Zoho OAuth implementation is Bearer.

expires_in

Indicates the time (in seconds) in which the access token expires. The lifetime of an access token is 1 hour (3600 seconds).

invalid_client

The client_id parameter is either missing, typed incorrectly, or its value is wrong.
(or)
The account-server URL is not corresponding to the location (i.e., datacenter) where the client is registered.

invalid_client_secret 

The client_secret parameter is either missing, typed incorrectly, or its value is wrong.

invalid_response_type

The grant_type parameter is either missing or typed incorrectly.

invalid_scope

The value of the grant_type parameter is entered as device_request. It should be device_token.

The value of the grant_type parameter is incorrect. It should be device_token.

The code parameter is either missing, typed incorrectly, or its value is wrong.