# Domain List Dilemma

**URL:** <https://devforum.zoom.us/t/domain-list-dilemma/77496>\
**Category:** Zoom Apps\
**Created:** [October 17, 2022, 1:33pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496 "2022-10-17T13:33:51Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 17, 2022, 1:33pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/1 "2022-10-17T13:33:51Z")

</div>

I am having difficulties understanding domain policy.

In our application we re unable to redirect users to Facebook, Google and Microsoft to let them login easily.

We decided to go with Zoom Auth and Zoom is not allowing our users to go Zoom Auth page as well 🙂

We have applied each steps at [OAuth with Zoom](https://marketplace.zoom.us/docs/guides/auth/oauth/) and followed best practices but we are not able to add [Zoom.us](http://Zoom.us) to Domain Allow list.

What you think?

Best!

![Screen Shot 2022-10-17 at 16.42.08](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/a/2/a2bff86b8d69b58809842bab88839a97021993b7.png)

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 17, 2022, 6:23pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/2 "2022-10-17T18:23:46Z")

</div>

@elisa.zoom need your attention here 🙂

---

<div class="post-metadata">

**Author:** ![JonStewart](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jonstewart/32/36192_2.png) [@JonStewart](https://devforum.zoom.us/u/JonStewart)\
**Post date:** [October 17, 2022, 8:51pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/3 "2022-10-17T20:51:45Z")

</div>

Glad to hear you’ve gone with Zoom Auth! Good decision.

Your Zoom App, tho, doesn’t need to Auth with Zoom. It’s a Zoom user! You’ll find the Zoom user id on the x-zoom-app-context header. You can also skip authentication for the Zoom App and go right to an ‘authenticated’ state using **in-client oauth**. This would give you an access token that you can use to pull user profile, etc.

> **[Authentication](https://marketplace.zoom.us/docs/zoom-apps/guides/authentication/)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

We have disabled [zoom.us](http://zoom.us) domain for security reasons

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 18, 2022, 7:21am UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/4 "2022-10-18T07:21:05Z")

</div>

Thanks Jon, I will try if we can pass marketplace approval process 😃

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 18, 2022, 5:21pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/5 "2022-10-18T17:21:14Z")

</div>

Hi @JonStewart ,

I have two questions regarding in-auth process.

1. Is there any way rather than using SDK like api calls with x-zoom-app-context
2. We are using [@zoom/appssdk - npm](https://www.npmjs.com/package/@zoom/appssdk) but it does not support test under regular browser and it gives : sdk.es.js:325 Uncaught (in promise) Error: The Zoom Apps SDK is not supported by this browser error.  
The question is there any way to work with sdk locally?

---

<div class="post-metadata">

**Author:** ![JonStewart](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jonstewart/32/36192_2.png) [@JonStewart](https://devforum.zoom.us/u/JonStewart)\
**Post date:** [October 18, 2022, 5:44pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/6 "2022-10-18T17:44:50Z")

</div>

These are addressed elsewhere. For now, though, and in short

1). In-client Oauth is the way to get user info - they must accept scopes in-app before given to you . . .  
2) The Zoom Apps SDK does not work in other browsers, but you may mock the methods used - simply create an object on window with methods (eg setVirtualBackground) that return promises resolving to the return value for the api/method as defined in the docs

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 18, 2022, 9:34pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/7 "2022-10-18T21:34:28Z")

</div>

Last question about ZoomSdk

authorize(logs {message: “Success”}) and config methods are working as expected but onAuthorized or addEventListener(‘onAuthorized’, callback) never fired.

“@zoom1234/appssdk”: “^0.16.6”,

```auto
 const authUser = () => {
      zoomSdk.authorize({
        state: 'TIA5UgoM38',
        codeChallenge: "xxxxxxxxxxxx"
      }).then((ret) => {
          console.log(ret);
      }).catch((e) => {
          console.log(e);
      })
  }

  useEffect( () => {
        zoomSdk.config({
          capabilities: ["authorize","onAuthorized"]
        });

        zoomSdk.onAuthorized((event) => {
          console.log(event)
        });
    }

```

---

<div class="post-metadata">

**Author:** ![JonStewart](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jonstewart/32/36192_2.png) [@JonStewart](https://devforum.zoom.us/u/JonStewart)\
**Post date:** [October 18, 2022, 9:57pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/8 "2022-10-18T21:57:57Z")

</div>

Pls try this:

`zoomSdk.addEventListener("onAuthorized", callback)`

The onXYEvent fields on the Zoom Apps SDK are deprecated/not implemented

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 18, 2022, 10:01pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/9 "2022-10-18T22:01:41Z")

</div>

Following is not fired as well.

```auto

        zoomSdk.addEventListener("onAuthorized", (event) => {
          const { code, state } = event;

          console.log("3. onAuthorized event fired.", code, state);
          console.log(
            "3a. Here is the event passed to event listener callback, with code and state: ",
            event
          );
          console.log(
            "4. POST the code, state to backend to exchange server-side for a token. Refer to backend logs now . . ."
          );
        });

```

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 19, 2022, 9:36am UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/11 "2022-10-19T09:36:07Z")

</div>

Oh I can not believe my self.

Problem is onAuthorized was not added to Event list on MarketPlace Interface.

Thanks.

---

<div class="post-metadata">

**Author:** ![quizflight](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/quizflight/32/38885_2.png) [@quizflight](https://devforum.zoom.us/u/quizflight)\
**Post date:** [October 19, 2022, 12:08pm UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/13 "2022-10-19T12:08:33Z")

</div>

Finally we have integrated with SDK and thanks for your all kind support!

I would like to provide some information for potential SDK users.

Be sure you checked following codebase to understand how code\_challenge works.

```auto
https://github.com/zoom/zoomapps-advancedsample-react/blob/main/backend/util/zoom-helpers.js

```

Be sure that you are using BASE64( **Development** ClientID:Secret) inside Authorization header.

Be sure that you passing **code\_verifier** while calling [https://zoom.us/oauth/token](https://zoom.us/oauth/token).

@JonStewart

code\_verifier is a bit confusing, I tried to use Verification Token BUT it is code\_challenge.

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [November 3, 2022, 12:16am UTC](https://devforum.zoom.us/t/domain-list-dilemma/77496/14 "2022-11-03T00:16:21Z")

</div>

Closed on November 3, 2022, 12:16am UTC