# Block user from joining Zoom webinar directly

**URL:** <https://devforum.zoom.us/t/block-user-from-joining-zoom-webinar-directly/65486>\
**Category:** API and Webhooks\
**Created:** [March 9, 2022, 7:08am UTC](https://devforum.zoom.us/t/block-user-from-joining-zoom-webinar-directly/65486 "2022-03-09T07:08:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![akshat.goel](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/akshat.goel/32/16996_2.png) [@akshat.goel](https://devforum.zoom.us/u/akshat.goel)\
**Post date:** [March 9, 2022, 7:08am UTC](https://devforum.zoom.us/t/block-user-from-joining-zoom-webinar-directly/65486/1 "2022-03-09T07:08:23Z")

</div>

**Description**  
We have built end-to-end integration for joining Zoom webinars or Zoom meetings from our web app.  
But the issue is that - the Meeting ID and Meeting Password are opening visible in the API calls.

Is there a way - with which - for certain meetings or webinars I can mandate the attendee to join the meeting or webinar only through my web app?  
I am worried that - hackers - might be able to Zoom-bomb my meeting by stealing Meeting ID + Meeting Password from my API calls.

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
JWT / Webhook

**Which Endpoint/s?**  
JS SDK

1. ZoomMtg.init({
2. ZoomMtg.join({

---

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [March 30, 2022, 1:21pm UTC](https://devforum.zoom.us/t/block-user-from-joining-zoom-webinar-directly/65486/2 "2022-03-30T13:21:16Z")

</div>

Greetings, @akshat.goel,

Welcome to the Developer Forum and thank you for posting. Happy to help you! First, can you help us better understand your current workflow for distributing the meeting details to participants ? As many details as you can provide will help advise the best path forward to accomplish your goal.

Regards,  
Donte

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 29, 2022, 11:22pm UTC](https://devforum.zoom.us/t/block-user-from-joining-zoom-webinar-directly/65486/3 "2022-04-29T23:22:00Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.