# Event notification endpoint URL validation fails

**URL:** <https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119>\
**Category:** API and Webhooks\
**Tags:** webhooks\
**Created:** [March 3, 2023, 3:49pm UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119 "2023-03-03T15:49:01Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![reyaz.ahmed](https://avatars.discourse-cdn.com/v4/letter/r/8e7dd6/32.png) [@reyaz.ahmed](https://devforum.zoom.us/u/reyaz.ahmed)\
**Post date:** [March 3, 2023, 3:49pm UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/1 "2023-03-03T15:49:02Z")

</div>

Hi,  
I am trying to create a webhook in my zoom app, I have created API using AWS API Gateway which executes AWS Lambda function (Node.Js) to validate. I have added code from the documentation as below:

const { body } = event;  
if(body.event === ‘endpoint.url\_validation’) {

```
  const hashForValidate = CryptoJS.createHmac('sha256', 'xxxxxxx').update(body.payload.plainToken).digest('hex')

   const response = {
    statusCode: 200,
    body: JSON.stringify({
      plainToken: body.payload.plainToken,
      encryptedToken: hashForValidate
    }),
   };
 return response;

}

```

But every-time when trying to validate it showing as

 ![screen1](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/0/905947c1df14155b729dec6db0dc26a6f5a9501f.png)

App type: Zoom App

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [March 3, 2023, 3:59pm UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/2 "2023-03-03T15:59:20Z")

</div>

@reyaz.ahmed Hope you will be fine

Here is the session → [How to enable Zoom WebHooks](https://youtu.be/wJ-xKEKlncY)

---

<div class="post-metadata">

**Author:** ![reyaz.ahmed](https://avatars.discourse-cdn.com/v4/letter/r/8e7dd6/32.png) [@reyaz.ahmed](https://devforum.zoom.us/u/reyaz.ahmed)\
**Post date:** [March 6, 2023, 5:52am UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/3 "2023-03-06T05:52:23Z")

</div>

Hi @freelancer.nak , Thank you for your quick response, I am following the same code as in the docs/ your video session , you can check my code above in the query as well, I am using lambda function instead of node server, so my post request will come in event parameter, and rest is same as node, but not sure why the validation always failing.

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [March 6, 2023, 12:25pm UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/4 "2023-03-06T12:25:45Z")

</div>

@reyaz.ahmed You need to verify that is there any preflight requests or 302 redirects to with initial request.

---

<div class="post-metadata">

**Author:** ![reyaz.ahmed](https://avatars.discourse-cdn.com/v4/letter/r/8e7dd6/32.png) [@reyaz.ahmed](https://devforum.zoom.us/u/reyaz.ahmed)\
**Post date:** [March 6, 2023, 12:31pm UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/5 "2023-03-06T12:31:53Z")

</div>

Hi @freelancer.nak , I tried with adding headers

headers: {  
‘Access-Control-Allow-Origin’: ‘\*’,  
},  
but no luck.

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [March 6, 2023, 2:56pm UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/6 "2023-03-06T14:56:39Z")

</div>

@reyaz.ahmed

Please test first that POST request with Postman & verify that on that POST request are there any 302 redirects happening in the Postman console.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [March 9, 2024, 6:32am UTC](https://devforum.zoom.us/t/event-notification-endpoint-url-validation-fails/84119/7 "2024-03-09T06:32:47Z")

</div>

Closed on March 9, 2024, 6:32am UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.