# Deauthorization event has empty body

**URL:** <https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763>\
**Category:** API and Webhooks\
**Created:** [October 12, 2021, 5:48pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763 "2021-10-12T17:48:18Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![jokuja](https://avatars.discourse-cdn.com/v4/letter/j/b19c9b/32.png) [@jokuja](https://devforum.zoom.us/u/jokuja)\
**Post date:** [October 12, 2021, 5:48pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/1 "2021-10-12T17:48:18Z")

</div>

**App Deauthorization Event Notification is sent with empty body**

**Error**  
Response body object is simply empty:  
body: {},

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
Authorization done using OAuth(not published yet), and revoking access from [App Marketplace](https://marketplace.zoom.us/user/installed)

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:

1. Authorize app using OAuth
2. Revoke access from “Installed apps”: [App Marketplace](https://marketplace.zoom.us/user/installed)

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [October 15, 2021, 1:44pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/2 "2021-10-15T13:44:17Z")

</div>

Hi @jokuja,

Can you confirm that you’re testing with your Production/Publishable URL when installing and then uninstalling your app?

Thanks,  
Will

---

<div class="post-metadata">

**Author:** ![jokuja](https://avatars.discourse-cdn.com/v4/letter/j/b19c9b/32.png) [@jokuja](https://devforum.zoom.us/u/jokuja)\
**Post date:** [October 15, 2021, 7:13pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/3 "2021-10-15T19:13:37Z")

</div>

I am testing installation using publishable URL, but there is no publishable URL for deauthorization, therefor I am doing it from my Zoom profile → installed apps, where the app appears:

[https://marketplace.zoom.us/user/installed](https://marketplace.zoom.us/user/installed)

If there is any other way how to trigger “deauthorization” event please let me know.

I also tried “Test the App Locally” but this doesnt trigger any events towards my API (at least not when using ngrok)

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [October 19, 2021, 3:36pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/4 "2021-10-19T15:36:26Z")

</div>

Hi @jokuja,

You can also revoke an access\_token / deauthorize an app using this flow:

> **[OAuth 2.0 - Authorization - Documentation](https://marketplace.zoom.us/docs/guides/auth/oauth#revoking)**
>
> OAuth with Zoom
> 
> The Zoom API uses OAuth 2.0 to authenticate and authorize users to make requests. To set up access credentials and request scopes for y...

Have you tried this?

Thanks,  
Will

---

<div class="post-metadata">

**Author:** ![jokuja](https://avatars.discourse-cdn.com/v4/letter/j/b19c9b/32.png) [@jokuja](https://devforum.zoom.us/u/jokuja)\
**Post date:** [October 28, 2021, 3:21pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/5 "2021-10-28T15:21:57Z")

</div>

Thanks for this, but I want to test a scenario when users will revoke access from Zoom dashboard before having Zoom app in production.  
Revoking using API is not a problem.

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [November 1, 2021, 11:17am UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/6 "2021-11-01T11:17:48Z")

</div>

Hi @jokuja,

It should still be possible to test this by uninstalling the production instance of the app from the user’s dashboard in the marketplace. If you’re still seeing the empty deauthorization event, can you share an example with us by opening up a request [here](https://devsupport.zoom.us)?

Please include the authorization URL that was used, the test user, and the timestamp of the event with the empty payload.

Thanks,  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [December 1, 2021, 9:18pm UTC](https://devforum.zoom.us/t/deauthorization-event-has-empty-body/58763/7 "2021-12-01T21:18:09Z")

</div>

Closed on December 1, 2021, 9:18pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
