# Authentication **URL:** https://devforum.zoom.us/c/api-and-webhooks/authentication/48.md?page=1 [Latest](https://devforum.zoom.us/latest.md) · [Categories](https://devforum.zoom.us/categories.md) · [Tags](https://devforum.zoom.us/tags.md) **Page:** 2 --- ## [onAuthorized event not firing on custom domain - works on ngrok](https://devforum.zoom.us/t/onauthorized-event-not-firing-on-custom-domain-works-on-ngrok/141478)
**Author:** [@EricChong](https://devforum.zoom.us/u/EricChong)\ **Replies:** 1\ **Last updated:** [January 24, 2026, 8:51pm UTC](https://devforum.zoom.us/t/onauthorized-event-not-firing-on-custom-domain-works-on-ngrok/141478 "2026-01-24T20:51:38Z")
Issue The onAuthorized event from the Zoom Apps SDK is not firing after a user clicks “Allow” on the consent dialog when my app is hosted on a custom domain. The same code works correctly on ngrok. Environment SDK Vers… --- ## [How to Prevent Zoom Access Token Expired (124) Error in Salesforce?](https://devforum.zoom.us/t/how-to-prevent-zoom-access-token-expired-124-error-in-salesforce/137652)
**Author:** [@cafer](https://devforum.zoom.us/u/cafer)\ **Replies:** 3\ **Last updated:** [December 1, 2025, 3:50pm UTC](https://devforum.zoom.us/t/how-to-prevent-zoom-access-token-expired-124-error-in-salesforce/137652 "2025-12-01T15:50:23Z")
Integration Overview We have built a custom Salesforce integration with Zoom for Meetings and Phone Calls. The app is created as a General App (Account Level) in Zoom Marketplace. From Salesforce, we can success… --- ## [Not Receiving Deauthorization Notifications at Webhook Endpoint for App Integration](https://devforum.zoom.us/t/not-receiving-deauthorization-notifications-at-webhook-endpoint-for-app-integration/138349)
**Author:** [@Rainbow1](https://devforum.zoom.us/u/Rainbow1)\ **Replies:** 2\ **Last updated:** [November 3, 2025, 9:11am UTC](https://devforum.zoom.us/t/not-receiving-deauthorization-notifications-at-webhook-endpoint-for-app-integration/138349 "2025-11-03T09:11:18Z")
Hello Zoom Developer Team, I am experiencing an issue with deauthorization notifications for our Zoom integration, specifically related to the Dotdigital app. Background: Our application was previously receiving deaut… --- ## ["Invalid scope" error with meeting/recording scopes on User-managed OAuth app](https://devforum.zoom.us/t/invalid-scope-error-with-meeting-recording-scopes-on-user-managed-oauth-app/138256)
**Author:** [@ys1](https://devforum.zoom.us/u/ys1)\ **Replies:** 2\ **Last updated:** [October 27, 2025, 5:00pm UTC](https://devforum.zoom.us/t/invalid-scope-error-with-meeting-recording-scopes-on-user-managed-oauth-app/138256 "2025-10-27T17:00:06Z")
Description I’m building a custom integration using User-managed OAuth that needs read-only access to meetings and recordings data. Authorization works successfully with the user:read:user scope alone, but fails with “I… --- ## [Authorization - Redirection is not working on click of "Decline"](https://devforum.zoom.us/t/authorization-redirection-is-not-working-on-click-of-decline/137893)
**Author:** [@Kiran\_Chandra](https://devforum.zoom.us/u/Kiran_Chandra)\ **Replies:** 6\ **Last updated:** [October 27, 2025, 3:02pm UTC](https://devforum.zoom.us/t/authorization-redirection-is-not-working-on-click-of-decline/137893 "2025-10-27T15:02:24Z")
Description We are using user-level zoom app to integrate zoom with our application. As part of integrating with zoom, we are currently using the above Links to communicate with the zoom Grant and authorization servers… --- ## [Multiple Refresh Tokens Support](https://devforum.zoom.us/t/multiple-refresh-tokens-support/138113)
**Author:** [@joey.grisafe](https://devforum.zoom.us/u/joey.grisafe)\ **Replies:** 2\ **Last updated:** [October 23, 2025, 5:19pm UTC](https://devforum.zoom.us/t/multiple-refresh-tokens-support/138113 "2025-10-23T17:19:28Z")
API Endpoint(s) and/or Zoom API Event(s) tokens oauth endpoint Description The current functionality is to invalidate any preexisting refresh tokens when a new one is created. This makes it hard to test an applicatio… --- ## [Shared permissions are not available to select when authenticating a gov app](https://devforum.zoom.us/t/shared-permissions-are-not-available-to-select-when-authenticating-a-gov-app/137804)
**Author:** [@yello\_zoom](https://devforum.zoom.us/u/yello_zoom)\ **Replies:** 1\ **Last updated:** [October 21, 2025, 5:37pm UTC](https://devforum.zoom.us/t/shared-permissions-are-not-available-to-select-when-authenticating-a-gov-app/137804 "2025-10-21T17:37:30Z")
We are implementing zoom for government, but when the users want to authorize the app, it does not have the option “Allow this app to use shared access permissions.” We need this option so we can schedule meetings on beh… --- ## [Authorization - Redirection is not working as expected in case of Decline](https://devforum.zoom.us/t/authorization-redirection-is-not-working-as-expected-in-case-of-decline/81373)
**Author:** [@kirannani1537](https://devforum.zoom.us/u/kirannani1537)\ **Replies:** 5\ **Last updated:** [October 10, 2025, 1:13pm UTC](https://devforum.zoom.us/t/authorization-redirection-is-not-working-as-expected-in-case-of-decline/81373 "2025-10-10T13:13:24Z")
Format Your New Topic as Follows: API Endpoint(s) and/or Zoom API Event(s) Link the API endpoint(s) and/orZoom API Event(s) you’re working with to help give context. https://zoom.us/oauth/token?code=\&grant\_t… --- ## [Server-to-Server OAuth app always returns invalid\_client when requesting access token](https://devforum.zoom.us/t/server-to-server-oauth-app-always-returns-invalid-client-when-requesting-access-token/137579)
**Author:** [@Kayla](https://devforum.zoom.us/u/Kayla)\ **Replies:** 2\ **Last updated:** [September 29, 2025, 5:24pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-app-always-returns-invalid-client-when-requesting-access-token/137579 "2025-09-29T17:24:23Z")
I am experiencing an issue with my Server-to-Server OAuth app. Whenever I try to request an access token, the Zoom API always responds with: { "reason": "Invalid client\_id or client\_secret", "error": "invalid\_clien… --- ## [Issues with OAuth state](https://devforum.zoom.us/t/issues-with-oauth-state/137610)
**Author:** [@mbolton](https://devforum.zoom.us/u/mbolton)\ **Replies:** 4\ **Last updated:** [September 25, 2025, 4:07pm UTC](https://devforum.zoom.us/t/issues-with-oauth-state/137610 "2025-09-25T16:07:38Z")
API Endpoint(s) and/or Zoom API Event(s) OAuth callback url. Description We use an object as our state param for the OAuth url. { "x": "value", "y": "value" } Recently we have noticed that after authorizing the a… --- ## [Zscaler DLP and Malware Scanning SaaS API app](https://devforum.zoom.us/t/zscaler-dlp-and-malware-scanning-saas-api-app/137136)
**Author:** [@Sean7](https://devforum.zoom.us/u/Sean7)\ **Replies:** 3\ **Last updated:** [September 24, 2025, 7:39pm UTC](https://devforum.zoom.us/t/zscaler-dlp-and-malware-scanning-saas-api-app/137136 "2025-09-24T19:39:17Z")
I’m working with my security team, who is requesting that the DLP and Malware Scanning SaaS API for Zoom to be added, see article about adding Zscaler to Zoom article. We’ve run into issues where we get ‘Error 401: An e… --- ## [Please dont try and build ZOOM apps with any AI TOOL](https://devforum.zoom.us/t/please-dont-try-and-build-zoom-apps-with-any-ai-tool/133199)
**Author:** [@expertswho](https://devforum.zoom.us/u/expertswho)\ **Replies:** 0\ **Last updated:** [May 26, 2025, 1:55pm UTC](https://devforum.zoom.us/t/please-dont-try-and-build-zoom-apps-with-any-ai-tool/133199 "2025-05-26T13:55:25Z")
Dear all developers. Let me say straight out that I love AI and use it all the time. But please DO NOT USE IT TO CREATE ZOOM APPS. - THE SOURCE DATA IS RUBBISH The information that the AI tools are using from the inte… --- ## [Server-to-Server Oauth error: invalid\_client](https://devforum.zoom.us/t/server-to-server-oauth-error-invalid-client/136424)
**Author:** [@Cybjorg](https://devforum.zoom.us/u/Cybjorg)\ **Replies:** 3\ **Last updated:** [August 15, 2025, 1:04pm UTC](https://devforum.zoom.us/t/server-to-server-oauth-error-invalid-client/136424 "2025-08-15T13:04:42Z")
API Endpoint(s) and/or Zoom API Event(s) POST \[zoom-url\]/oauth/token?grant\_type=account\_credentials&account\_id=\[account-id\] Description I’m trying to use Postman to get an authorization token for my S2S app, but it ke… --- ## [OAuth authentication suddenly failing with “Invalid Client ID (4,700)”](https://devforum.zoom.us/t/oauth-authentication-suddenly-failing-with-invalid-client-id-4-700/136351)
**Author:** [@dev\_shingo](https://devforum.zoom.us/u/dev_shingo)\ **Replies:** 3\ **Last updated:** [August 14, 2025, 7:53am UTC](https://devforum.zoom.us/t/oauth-authentication-suddenly-failing-with-invalid-client-id-4-700/136351 "2025-08-14T07:53:10Z")
We have an app registered in the Zoom App Marketplace, and OAuth authentication suddenly started failing with the following error: “Invalid Client ID: \[REDACTED\] (4,700)” Key points: No configuration changes were mad… --- ## [Zoom Webhook URL Verification Token Deprecation Enquiry](https://devforum.zoom.us/t/zoom-webhook-url-verification-token-deprecation-enquiry/136377)
**Author:** [@Abdul\_Qadeer](https://devforum.zoom.us/u/Abdul_Qadeer)\ **Replies:** 1\ **Last updated:** [August 13, 2025, 2:48pm UTC](https://devforum.zoom.us/t/zoom-webhook-url-verification-token-deprecation-enquiry/136377 "2025-08-13T14:48:45Z")
As per Zoom’s developer documentation, the Webhook URL verification token has been deprecated and replaced by the Secret Token for webhook verification, effective June 2025. However, our system is still receiving the ver… --- ## [Modification to the home page](https://devforum.zoom.us/t/modification-to-the-home-page/136256)
**Author:** [@Guillaume3](https://devforum.zoom.us/u/Guillaume3)\ **Replies:** 0\ **Last updated:** [August 8, 2025, 3:14pm UTC](https://devforum.zoom.us/t/modification-to-the-home-page/136256 "2025-08-08T15:14:26Z")
Hello, Since 3 days, the launcher display is no longer showing the declared images. has anyone else encountered this issue? --- ## [Regarding Migration of Oauth App to Granular Scopes](https://devforum.zoom.us/t/regarding-migration-of-oauth-app-to-granular-scopes/135925)
**Author:** [@Integrations5](https://devforum.zoom.us/u/Integrations5)\ **Replies:** 1\ **Last updated:** [August 6, 2025, 7:10pm UTC](https://devforum.zoom.us/t/regarding-migration-of-oauth-app-to-granular-scopes/135925 "2025-08-06T19:10:54Z")
Hi , We had recently applied for the publishing of our Oauth Marketplace Application, CloudEagle - Usage , with the migration to granular scopes along with addition of several new scopes and for listing in the EU market… --- ## [How to Download Zoom Recording via API Without Re-Entering Passcode (Same Account)](https://devforum.zoom.us/t/how-to-download-zoom-recording-via-api-without-re-entering-passcode-same-account/135913)
**Author:** [@Muhammad11](https://devforum.zoom.us/u/Muhammad11)\ **Replies:** 0\ **Last updated:** [July 31, 2025, 7:44pm UTC](https://devforum.zoom.us/t/how-to-download-zoom-recording-via-api-without-re-entering-passcode-same-account/135913 "2025-07-31T19:44:34Z")
API Endpoint(s) and/or Zoom API Event(s) GET /v2/meetings/{meetingId}/recordings Direct recording download\_url returned from the above endpoint Description I’m trying to automate the download of Zoom meeting rec… --- ## [Requirement of Meeting SDK app developement](https://devforum.zoom.us/t/requirement-of-meeting-sdk-app-developement/135888)
**Author:** [@Kadambini](https://devforum.zoom.us/u/Kadambini)\ **Replies:** 0\ **Last updated:** [July 31, 2025, 9:08am UTC](https://devforum.zoom.us/t/requirement-of-meeting-sdk-app-developement/135888 "2025-07-31T09:08:27Z")
For which plan meeting sdk option will be availab le for buil app? What will be the account type? --- ## [Clarification regarding "client\_credentials" access\_token](https://devforum.zoom.us/t/clarification-regarding-client-credentials-access-token/135631)
**Author:** [@ucczoomaruba](https://devforum.zoom.us/u/ucczoomaruba)\ **Replies:** 7\ **Last updated:** [July 31, 2025, 4:14am UTC](https://devforum.zoom.us/t/clarification-regarding-client-credentials-access-token/135631 "2025-07-31T04:14:27Z")
API Endpoint(s) and/or Zoom API Event(s) oauth: https://zoom.us/oauth/token?grant\_type=client\_credentials \* Description I would like to get some clarification on the usage of client\_credentials type of access\_token w… --- ## [Attempting to obtain bearer token](https://devforum.zoom.us/t/attempting-to-obtain-bearer-token/135072)
**Author:** [@MP123](https://devforum.zoom.us/u/MP123)\ **Replies:** 2\ **Last updated:** [July 18, 2025, 7:28pm UTC](https://devforum.zoom.us/t/attempting-to-obtain-bearer-token/135072 "2025-07-18T19:28:38Z")
I’m having trouble attaining a bearer token for a server to server app. Following instructions provided by Zoom for the Server to Server OAuth entry. I use the following, inserting my ClientID, ClientSecret and AccountI… --- ## [Granted scopes for features user is not licensed for](https://devforum.zoom.us/t/granted-scopes-for-features-user-is-not-licensed-for/134104)
**Author:** [@Built](https://devforum.zoom.us/u/Built)\ **Replies:** 4\ **Last updated:** [June 27, 2025, 5:34pm UTC](https://devforum.zoom.us/t/granted-scopes-for-features-user-is-not-licensed-for/134104 "2025-06-27T17:34:18Z")
Our marketplace app requests webinar scopes so that it can query webinars, etc. Not everyone has the webinar license, which is fine, but after oauth, we’re getting back the webinar-related scopes we request — even for a… --- ## [JWT Access token signature verification](https://devforum.zoom.us/t/jwt-access-token-signature-verification/134146)
**Author:** [@Ferenc](https://devforum.zoom.us/u/Ferenc)\ **Replies:** 3\ **Last updated:** [June 27, 2025, 2:18pm UTC](https://devforum.zoom.us/t/jwt-access-token-signature-verification/134146 "2025-06-27T14:18:14Z")
API Endpoint(s) and/or Zoom API Event(s) https://zoom.us/oauth/token Description Unable to verify JWT signature with app Client Secret Error? Signature verification failed How To Reproduce 1. Create a Zoom app 2.… --- ## [Differentiate users](https://devforum.zoom.us/t/differentiate-users/133962)
**Author:** [@Steve7](https://devforum.zoom.us/u/Steve7)\ **Replies:** 0\ **Last updated:** [June 13, 2025, 3:17am UTC](https://devforum.zoom.us/t/differentiate-users/133962 "2025-06-13T03:17:41Z")
For my app I want to differentiate the free users and premium users(who have paid for our service), if i have a database of them, how do i verify that in my zoom meet? I want to provide different functionality based on … --- ## [400 Bad Request error in c#](https://devforum.zoom.us/t/400-bad-request-error-in-c/133299)
**Author:** [@cletham](https://devforum.zoom.us/u/cletham)\ **Replies:** 7\ **Last updated:** [June 5, 2025, 9:56pm UTC](https://devforum.zoom.us/t/400-bad-request-error-in-c/133299 "2025-06-05T21:56:44Z")
Hi i am having an issue when trying to get an access token in my program. i am using Visual Studio 2022 and this is the code i have so far: i have blanked out the client id and client secret just for security purposes. … --- ## [Account-level vs user-level oauth app](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950)
**Author:** [@bmartin](https://devforum.zoom.us/u/bmartin)\ **Replies:** 4\ **Last updated:** [June 3, 2025, 3:50am UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950 "2025-06-03T03:50:16Z")
I want to allow the individual users in my web application to be able to create new scheduled meetings whenever they want from within my web application. Which oauth app should I use in this case? Account-level or user-… --- ## [Error While Getting User Info. Code 124 Invalid access token](https://devforum.zoom.us/t/error-while-getting-user-info-code-124-invalid-access-token/133356)
**Author:** [@Saleem1](https://devforum.zoom.us/u/Saleem1)\ **Replies:** 3\ **Last updated:** [June 2, 2025, 9:24am UTC](https://devforum.zoom.us/t/error-while-getting-user-info-code-124-invalid-access-token/133356 "2025-06-02T09:24:02Z")
Hi All, I am trying to user info via zoom API but I get below error for access token. I have looked up everything but unable to find the cause of the issue. Token URL: https://zoom.us/oauth/token using grant type as cl… --- ## [I Want to validate my Webhook in zoom , but it failed](https://devforum.zoom.us/t/i-want-to-validate-my-webhook-in-zoom-but-it-failed/133345)
**Author:** [@Axya](https://devforum.zoom.us/u/Axya)\ **Replies:** 2\ **Last updated:** [May 30, 2025, 4:15pm UTC](https://devforum.zoom.us/t/i-want-to-validate-my-webhook-in-zoom-but-it-failed/133345 "2025-05-30T16:15:24Z")
I want to validate my Zoom Webhook in my django project, but it fails with my domain but when i use ngrok on same project then it works fine and validated successfully, i dont know what’s an issue, becuase project is sam… --- ## [Refresh Token expired and getting a new refresh token](https://devforum.zoom.us/t/refresh-token-expired-and-getting-a-new-refresh-token/132869)
**Author:** [@victor-rd](https://devforum.zoom.us/u/victor-rd)\ **Replies:** 2\ **Last updated:** [May 21, 2025, 5:39pm UTC](https://devforum.zoom.us/t/refresh-token-expired-and-getting-a-new-refresh-token/132869 "2025-05-21T17:39:19Z")
Hi I saw that the refresh token expiration time changed from 15 years to 3 months. I got a couple refresh token expired, I saw that one way to get again a refresh token is asking the user to re-add/authorize the applic… --- ## [Invalid Redirect: {url} (4700)](https://devforum.zoom.us/t/invalid-redirect-url-4700/131525)
**Author:** [@ModernHire](https://devforum.zoom.us/u/ModernHire)\ **Replies:** 7\ **Last updated:** [May 5, 2025, 9:16pm UTC](https://devforum.zoom.us/t/invalid-redirect-url-4700/131525 "2025-05-05T21:16:25Z")
Hello, I am doing some discovery on our existing Zoom applications and how they are configured before we adopt the required conversion and make the necessary DSA updates to be in compliance with European standards. I a… [Previous page](https://devforum.zoom.us/c/api-and-webhooks/authentication/48.md) [Next page](https://devforum.zoom.us/c/api-and-webhooks/authentication/48.md?page=2)