# \[Critical, Again\] OAuth API Redirect URL changes http:// to https://

**URL:** <https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039>\
**Category:** API and Webhooks\
**Created:** [October 22, 2020, 3:58pm UTC](https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039 "2020-10-22T15:58:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![edu\_dev4](https://avatars.discourse-cdn.com/v4/letter/e/ad7895/32.png) [@edu\_dev4](https://devforum.zoom.us/u/edu_dev4)\
**Post date:** [October 22, 2020, 3:58pm UTC](https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039/1 "2020-10-22T15:58:05Z")

</div>

This issue, originally resolved on September 10th, has reappeared, causing critical authentication failures where the return URL does not reflect the provided return URL. The protocol is changed from http to https.

> [@\[Critical\] OAuth API Redirect URL changes http:// to https://](https://devforum.zoom.us/t/critical-oauth-api-redirect-url-changes-http-to-https/28123/5):
>
> Hey @edu_dev4, Thanks for your feedback. I will pass this along to our team to see if we can make this change. Thanks, Tommy

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [October 22, 2020, 4:31pm UTC](https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039/2 "2020-10-22T16:31:09Z")

</div>

Hi @edu_dev4,

Are you still using HTTP in your redirect URL? Per Tommy’s note in the previous thread, you will need to use HTTPS to avoid issues. This is denoted in our documentation [here](https://marketplace.zoom.us/docs/guides/build/oauth-app#app-credentials):

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/a/b/ab93bc8a657d65f2de51cca48dc5d7e5da95e9b5.png)

Thanks,  
Will

---

<div class="post-metadata">

**Author:** ![edu\_dev4](https://avatars.discourse-cdn.com/v4/letter/e/ad7895/32.png) [@edu\_dev4](https://devforum.zoom.us/u/edu_dev4)\
**Post date:** [October 22, 2020, 5:42pm UTC](https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039/3 "2020-10-22T17:42:11Z")

</div>

The Development app credentials have always supported http. We rely on this for our developers in their local environments and in our QA environments. These are the URLs that are broken as of today.

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [October 22, 2020, 5:55pm UTC](https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039/4 "2020-10-22T17:55:11Z")

</div>

Hey @edu_dev4,

I understand the challenge this presents and have reached out to our team to see if there have been any recent changes. I’ll let you know what I find as soon as I have an update (ZOOM-191046)

That being said, we do advise you to use HTTPS, per our documentation, even if HTTP might have worked in the past.

Thanks,  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [November 22, 2020, 3:55am UTC](https://devforum.zoom.us/t/critical-again-oauth-api-redirect-url-changes-http-to-https/34039/5 "2020-11-22T03:55:17Z")

</div>

Closed on November 22, 2020, 3:55am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.