Description/Error
When an account has Share cloud recordings only with members of my account enabled and you try to download without an access token, the url returns an html page with response code 200, and some text in the middle of the page that says No permission (200). This is very unhelpful if you are trying to do this in code. The server should return a 401 response, even if it does return an html page. This will at least tell you what is going on if you are running this in code.
I came across another instance of this. If cloud downloads are completely disabled or IP restricted then even using the download token you get a soft 401 page as well. The page returns a 200 but shows an error on the page as text saying that downloads are disabled or some other message.
Either of these two (download disabled or IP Address Control set to certain IP’s only):
I understand that is the intended functionality. What is very unhelpful about this (as in my first post on this topic at the top of the page), is that these pages return response code 200 which means OK. You are expecting to download an mp4 file but instead get an html webpage, that is not helpful.
Even if it returns the html page, the response code should match the type of response. So if I am unauthorized (ie. lacking valid credentials of any sort) it should return a 401. If I don’t have the proper level of authorization then 403 (forbidden) is appropriate. An example: https://leastprivilege.com/2014/10/02/401-vs-403/
Since the download links behave this way (return 200 OK for everything) it forces the users of the zoom api to take a lot more extra steps to verify that they actually downloaded a valid mp4 file vs. not. I can’t just trust that it is correct if it gives me a 200 OK.
This is why I posted about this and as of October you said the team will work on fixing the error page.
