# Customers' token refresh error

**URL:** <https://community.particle.io/t/customers-token-refresh-error/59396>\
**Category:** Cloud\
**Created:** [February 15, 2021, 6:25pm UTC](https://community.particle.io/t/customers-token-refresh-error/59396 "2021-02-15T18:25:38Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![csaba](https://avatars.discourse-cdn.com/v4/letter/c/3be4f8/32.png) [@csaba](https://community.particle.io/u/csaba)\
**Post date:** [February 15, 2021, 6:25pm UTC](https://community.particle.io/t/customers-token-refresh-error/59396/1 "2021-02-15T18:25:38Z")

</div>

We have a lot of customers with particle shadow users (made 1+ years ago) where the auth token can no longer be refreshed. This seems to be occurring ever since there was an API change on particle’s side for the customers route to be product-specific, i.e. our customer routes changing from /v1/orgs//customers to /v1/products//customers. There is an error “invalid scope” when attempting to refresh their expired tokens, even though they are listed on the dashboard as customers of the correct product. One solution is for us to manually re-create these shadow users, but this also requires re-claiming their devices, which is a time consuming process for us that has to be done manually with each of our customers.

Is there any other way to “fix” these shadow users, or any method you could apply on your backend?

Thanks!  
Csaba

---

<div class="post-metadata">

**Author:** ![marekparticle](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/marekparticle/32/22793_2.png) [@marekparticle](https://community.particle.io/u/marekparticle)\
**Post date:** [February 17, 2021, 12:35pm UTC](https://community.particle.io/t/customers-token-refresh-error/59396/2 "2021-02-17T12:35:24Z")

</div>

Hi @csaba - can you provide us with the specific call you are using? (and maybe DM me the Product ID on which you are using it?)

---

<div class="post-metadata">

**Author:** ![csaba](https://avatars.discourse-cdn.com/v4/letter/c/3be4f8/32.png) [@csaba](https://community.particle.io/u/csaba)\
**Post date:** [February 19, 2021, 2:10am UTC](https://community.particle.io/t/customers-token-refresh-error/59396/3 "2021-02-19T02:10:52Z")

</div>

Hello,  
We are using the call detailed under “Generate a customer scoped access token” in the cloud API documentation:

[https://api.particle.io/oauth/token](https://api.particle.io/oauth/token)  
grant\_type=client\_credentials  
“[scope=customer=jane@example.com](mailto:scope=customer=jane@example.com)”

We are using an Authorization header with a product-specific client id and client secret. I’ll send details in a PM. Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/particle/original/3X/6/4/64635adccc35238caa19e9b553ec3e98b163d026.png) [@system](https://community.particle.io/u/system)\
**Post date:** [August 20, 2021, 2:11pm UTC](https://community.particle.io/t/customers-token-refresh-error/59396/4 "2021-08-20T14:11:17Z")

</div>

This topic was automatically closed 182 days after the last reply. New replies are no longer allowed.