Byrne Reese avatar image
Byrne Reese posted

Resolving auth error "client authentication required" (error: OAU-123)

If you are receiving a “Client authentication is required” error, for example:

     "error": "invalid_client", 
     "errors": [{ 
         "errorCode": "OAU-123", 
         "message": "Client authentication is required" 
     "error_description": "Client authentication is required" 

Then it is possible your application is configured as a client-side app, but has not implemented PKCE authentication properly. To see if this applies to you, log into the Developer Console, navigate to the settings page for the application in question, and scroll down to the Auth section. If your app has "3-legged OAuth flow authorization code" selected, and "Client-side web app, e.g. SPA, Javascript" selected as well, then chances are you are not transmitting the code verifier and challenge properly.


Test this hypothesis by changing "From what type of app will you be calling the API?" to "Server-side web app (most common)." If the error goes away, then you have your smoking gun.

The solution will require you to read up on PKCE and implement your code verifier and challenge correctly. This is made much easier if you use one of RingCentral's SDKs.

1 |3000

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Developer sandbox tools

Using the RingCentral Phone for Desktop, you can dial or receive test calls, send and receive test SMS or Fax messages in your sandbox environment.

Download RingCentral Phone for Desktop:

Tip: switch to the "sandbox mode" before logging in the app:

  • On MacOS: press "fn + command + f2" keys
  • On Windows: press "Ctrl + F2" keys



ByrneReese contributed to this article