# Authenticate webhook POST from Zoom

**URL:** <https://devforum.zoom.us/t/authenticate-webhook-post-from-zoom/14903>\
**Category:** API and Webhooks\
**Created:** [April 25, 2020, 8:55pm UTC](https://devforum.zoom.us/t/authenticate-webhook-post-from-zoom/14903 "2020-04-25T20:55:58Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 28, 2020, 9:11pm UTC](https://devforum.zoom.us/t/authenticate-webhook-post-from-zoom/14903/2 "2020-04-28T21:11:30Z")

</div>

Hey @stevejohnson,

What language are you using for your server?

The verification token should be included, but depending on how you are receiving requests it could differ where in the header to find it.

> [@Data Compliance API - Deauthorization Endpoint URL](https://devforum.zoom.us/t/data-compliance-api-deauthorization-endpoint-url/3870/15):
>
> Hey @john! You are correct, you will only receive the Deauthorization Event Notification Webhook with the Production version of your app. You can test this by installing the production version of your app via your apps publishable URL, [54%20PM] And then [uninstalling your app on your “Installed Apps” page.](https://marketplace.zoom.us/user/installed) I made a simple PHP web server and was able to see the Verification Token in the request headers (when testing a Zoom event/webhook sent to my server). Here is my code: Examp…

Thanks,  
Tommy

---

_[View the full topic](https://devforum.zoom.us/t/authenticate-webhook-post-from-zoom/14903)._