# Cannot load images - Layers API - Zoom app

**URL:** <https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301>\
**Category:** Zoom Apps\
**Created:** [September 29, 2024, 5:32pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301 "2024-09-29T17:32:52Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mikron](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mikron/32/18634_2.png) [@Mikron](https://devforum.zoom.us/u/Mikron)\
**Post date:** [September 29, 2024, 5:32pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301/1 "2024-09-29T17:32:52Z")

</div>

I’m using the Zoom Layers API example.  
I cannot seem to load an ![]() tag, nor to connect to Firebase.  
It seems like it’s all blocked.  
What is the reason for this? Is it my servers fault maybe? Is it a Zoom limitation?

Thanks

---

<div class="post-metadata">

**Author:** ![MultiplayerSession](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/multiplayersession/32/66446_2.png) [@MultiplayerSession](https://devforum.zoom.us/u/MultiplayerSession)\
**Post date:** [September 30, 2024, 2:16pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301/2 "2024-09-30T14:16:12Z")

</div>

Have you disclosed and justified the domains used by your images and scripts in your application settings under **Build your app** ; **Features** ; **Surface** ; **Domain Allow List**?

---

<div class="post-metadata">

**Author:** ![Mikron](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mikron/32/18634_2.png) [@Mikron](https://devforum.zoom.us/u/Mikron)\
**Post date:** [September 30, 2024, 6:19pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301/3 "2024-09-30T18:19:41Z")

</div>

Hi @MultiplayerSession,

Do you mean under “Basic Information” → “OAuth Allow Lists”?  
If so then yes, I listed all the firebase related servers…  
gstatic,googleapis,firebaseio,[api.google.com](http://api.google.com)

When I access the website directly, I get an anonymous UID from Firebase Auth. When I activate the app on Zoom, if fails to communicate, must be blocked as you said, I just don’t know why…

Edit: Ok, now I’ve found the Domain Allow section, thanks!

---

<div class="post-metadata">

**Author:** ![Mikron](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mikron/32/18634_2.png) [@Mikron](https://devforum.zoom.us/u/Mikron)\
**Post date:** [September 30, 2024, 6:40pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301/4 "2024-09-30T18:40:56Z")

</div>

Auth still cannot reach server

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/8/98953ffda2e704d24847c14d6360c5cc4a1dd050.png)

---

<div class="post-metadata">

**Author:** ![Mikron](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mikron/32/18634_2.png) [@Mikron](https://devforum.zoom.us/u/Mikron)\
**Post date:** [September 30, 2024, 6:43pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301/5 "2024-09-30T18:43:15Z")

</div>

Ok, ended up adding https://YOUR\_PROJECT\_ID.cloudfunctions.net then it worked.  
THANKS!

---

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [November 13, 2024, 11:45pm UTC](https://devforum.zoom.us/t/cannot-load-images-layers-api-zoom-app/118301/6 "2024-11-13T23:45:55Z")

</div>

Awesome, @Mikron ! I’m glad to hear you were able to resolve that behavior by adding the domain to the allowlist. Please let us know if you have any other questions. We’re always happy to help you create the best virtual experience possible.
