# Does each Customer require a JWT API Key and API Secret? **URL:** \ **Category:** Web\ **Created:** [June 16, 2020, 4:05pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508 "2020-06-16T16:05:57Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![darragh.duffy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/darragh.duffy/32/2392_2.png) [@darragh.duffy](https://devforum.zoom.us/u/darragh.duffy)\ **Post date:** [June 16, 2020, 4:05pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/1 "2020-06-16T16:05:58Z")
**Description** A general question, our use case is to allow each of customer to view Meetings and Webinars via the webSDK, and I have a proof of concept working that displays meetings / webinars. I have created under my account; a JWT App and I am using these credentials for the signature - and this is working fine. For each of our customers, they will have an account already with Zoom. Will each of these mutual customers be required to provide use with their JWT API Key and API Secret? Which I think makes sense, but I just wanted to check with you, if there is a way a customer can ‘trust’ our JWT API Key and Secret. I am trying to determine if its possible to save each customer the need to create a JWT API Key and API Secret. ---
**Author:** ![sreeji.pa](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/sreeji.pa/32/9674_2.png) [@sreeji.pa](https://devforum.zoom.us/u/sreeji.pa)\ **Post date:** [June 16, 2020, 4:47pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/2 "2020-06-16T16:47:36Z")
I also have the same question, In my case we have multiple host and single web sdk integrated angular app. And some of our participant are facing issues like timeout issue while trying to join in morning session. So I suspect this timeout is because of JWT. Is there any hard limit to in using single jwt token for participant to join using web sdk ? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [June 18, 2020, 11:35pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/3 "2020-06-18T23:35:07Z")
Hey @darragh.duffy, @sreeji.pa, We highly discourge asking users to share their JWT credentials. How the Web SDK works is the developer uses their JWT credentials to host the Web SDK and [generate the signature](https://marketplace.zoom.us/docs/sdk/native-sdks/web/essential/signature). The Web SDK can then join any meeting, internally or externally to your Zoom account, but the Web SDK can only start meetings that belong to the same Zoom account as the JWT credentials. If you would like to take actions on external Zoom users behalf, like creating and managing meetings, you can create an [OAuth app](https://marketplace.zoom.us/docs/guides/build/oauth-app) and use the [OAuth flow](https://marketplace.zoom.us/docs/guides/auth/oauth). Please let me know if you have additional questions! 🙂 Thanks, Tommy ---
**Author:** ![darragh.duffy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/darragh.duffy/32/2392_2.png) [@darragh.duffy](https://devforum.zoom.us/u/darragh.duffy)\ **Post date:** [June 19, 2020, 8:25am UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/4 "2020-06-19T08:25:16Z")
Thanks Tommy for taking the time to answer the question, I know you and the team must be super busy. I do have a follow up question, I am more focused on Webinars at the moment. (And I know at present the WebSDK can not start webinars - I believe a later version will have this.) I think you have answered this already but I am just clarifying please, you said: _The Web SDK can then join any meeting, internally or **externally** to your Zoom account_ Here I am focusing on externally, this is the scenario: - Customer Bingo has a Zoom Account - We have a Zoom Account Pro or higher (i.e., paid licensed account) - We have a JWT API / Secret on our Account (not the customer’s) - Customer Bingo has a Webinar set up, and the Webinar ID “1234567890” and Password is “BINGO” **The question is then** Our WebSDK JWT API from our Zoom Account can create a signature and Join this Webinar? To do this - we need the Webinar ID and the Password. (we probably don’t need the password i.e., the user can enter the password) **A Final Question 🙂** Apart from not be able to Start the Webinar or Meetings. Will there be any scenario where our WebSDK will NOT be able to Join a Webinar ? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [June 22, 2020, 10:03pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/5 "2020-06-22T22:03:11Z")
Hey @darragh.duffy, > [@darragh.duffy](#): > > Our WebSDK JWT API from our Zoom Account can create a signature and Join this Webinar? Correct! > [@darragh.duffy](#): > > Will there be any scenario where our WebSDK will NOT be able to Join a Webinar ? No, you should be able to join the webinar. 🙂 Thanks, Tommy ---
**Author:** ![darragh.duffy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/darragh.duffy/32/2392_2.png) [@darragh.duffy](https://devforum.zoom.us/u/darragh.duffy)\ **Post date:** [June 25, 2020, 8:18am UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/6 "2020-06-25T08:18:09Z")
Thanks @tommy for the confirmation ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [June 26, 2020, 4:34pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/7 "2020-06-26T16:34:25Z")
You are welcome @darragh.duffy! 🙂 -Tommy ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 10:28pm UTC](https://devforum.zoom.us/t/does-each-customer-require-a-jwt-api-key-and-api-secret/21508/8 "2020-08-21T22:28:12Z")
Closed on August 21, 2020, 10:28pm UTC