When I use https://zoom.us/wc/{{meetindID}}/join?prefer=1&un=bmFtZQ== link to join by browser, It is working fine. But the issue is if a user copy this url and with the help of code change the un parameter then he is also able to join the meeting, this should not be done.
Second case -
If attendee use this above url and pass url to someone and both entered in meeting. But with the help of participant web hook I can identify now by user_name that this user is coming twice in meeting so I can deny the meeting access for them.
But here when I update meeting registrant status by api to deny they still able to join the meeting.
Here lot of issues are coming because of improper documentation.