# INVALID OPERATION WITH EXPIRED PASSWORD error

**URL:** <https://community.postman.com/t/invalid-operation-with-expired-password-error/39057>\
**Category:** Help Hub\
**Tags:** authentication\
**Created:** [September 12, 2022, 2:12pm UTC](https://community.postman.com/t/invalid-operation-with-expired-password-error/39057 "2022-09-12T14:12:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![research-pilot-44866](https://avatars.discourse-cdn.com/v4/letter/r/b19c9b/32.png) [@research-pilot-44866](https://community.postman.com/u/research-pilot-44866)\
**Post date:** [September 12, 2022, 2:12pm UTC](https://community.postman.com/t/invalid-operation-with-expired-password-error/39057/1 "2022-09-12T14:12:15Z")

</div>

_My question_: I’m authenticating to a Salesforce Sandbox environment and have used a POST request to [https://test.salesforce.com/services/oauth2/token](https://test.salesforce.com/services/oauth2/token) to get the auth token. I can successfully get the auth token.

I then use that auth token in a subsequent POST call to {{\_instance\_url}}/services/data/v{{version}}/commerce/oci/availability/availability-records/actions/get-availability.  
Auth Type is “Bearer Token” and token is passed in the Authorization Header as “Bearer {{\_authorization\_key}}”  
I then get a 401 Unauthorized with this message:

“message”: “Your password has expired. Please reset your password.”,  
“errorCode”: “INVALID\_OPERATION\_WITH\_EXPIRED\_PASSWORD”

But the password is not expired. I can still log into the Salesforce instance and am able to get an auth code?