In my case my secret was expired due to max lifetime is 6 months, I recreated secret token using ruby script on my .p8 certificated and error invalid_client was fixed