# Fill required fields from 3rd party

**URL:** <https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419>\
**Category:** Web\
**Created:** [December 15, 2020, 9:59am UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419 "2020-12-15T09:59:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![etibar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/etibar/32/20169_2.png) [@etibar](https://devforum.zoom.us/u/etibar)\
**Post date:** [December 15, 2020, 9:59am UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/1 "2020-12-15T09:59:45Z")

</div>

Outside of our website, clients have their own Zoom accounts and subscriptions and we allow them to serve a UI/gateway to their meetings. We allow event organizers to input a Zoom meeting ID which could then be joined by attendees. These meetings or webinars are not hosted by us. To join an attendee into a meeting, we would like to use ZoomMtg.join [method](https://zoom.github.io/sample-app-web/ZoomMtg.html#join). From the endpoint, as we see In order to join the meeting or webinar we need API\_KEY and Signature. As far as I understood we can ask event organizers to put their api\_key, however as a gateway for the meetings, we can’t generate a signature on the behalf of our clients.  
How it can be solved?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [December 16, 2020, 11:45pm UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/2 "2020-12-16T23:45:22Z")

</div>

Hey @etibar,

> [@etibar](#):
>
> As far as I understood we can ask event organizers to put their api\_key

Currently we highly advise against customers sharing their JWT Credentials. Instead, use the [OAuth flow](https://marketplace.zoom.us/docs/guides/auth/oauth) to make authorized API requests on a users behalf.

That being said, currently you cannot use OAuth with the Web SDK. Please see my post here about the planned improvement:

> [@Start a meeting on behalf of a user - Web SDK with OAuth](https://devforum.zoom.us/t/start-a-meeting-on-behalf-of-a-user-web-sdk-with-oauth/27245/2):
>
> Hey @mayank.patel, We discourage asking customers to share their JWT Credentials with developers. I do see the headache here how you can’t use OAuth to start meetings for a user via the Web SDK since the Web SDK can only start meetings owned by the same account as the JWT App. I will share this feedback with our team and see if we can expand the Web SDK authentication to allow authorized users to start their own meetings. (CS-2206) In the meantime, I suggest having the host of the meeting s…

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![etibar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/etibar/32/20169_2.png) [@etibar](https://devforum.zoom.us/u/etibar)\
**Post date:** [December 17, 2020, 7:18am UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/3 "2020-12-17T07:18:26Z")

</div>

Hi @tommy,  
thanks for your response. As far as I see in above-stated link the problem is about starting the meeting.  
In my case, the problem is about joining the configured meeting.  
Basically, I am wondering how we can use ZoomMtg.join [method](https://zoom.github.io/sample-app-web/ZoomMtg.html#join) without asking JWT credentials from the party who started or configured the meeting?  
So let me explain the scenario in this way.

1. Client configures a meeting from zoom platform.
2. Client takes meeting id and puts it into our platform.
3. Users who are in our platform can join the embedded meeting.  
The problem starts with step 3. Here in order to join the meeting web sdk method asks as to input signature which is generated by using client’s (who initiated the meeting) API key and secret.

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [December 18, 2020, 6:37pm UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/4 "2020-12-18T18:37:06Z")

</div>

Hey @etibar,

Thank you for reaching out to the Zoom Developer Forum. When you are generating a signature, it’s actually expected that you use your own API Key and Secret. This should allow you to join anyone’s meeting. We can see this when we look at the [Generate Signature documentation](https://marketplace.zoom.us/docs/sdk/native-sdks/web/build/signature) as shown below.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/a/7/a7a44f89b936fa6eef261f3119859ffe4121d1ee.png)

I hope that helps! Let me know if you have any questions.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![etibar](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/etibar/32/20169_2.png) [@etibar](https://devforum.zoom.us/u/etibar)\
**Post date:** [December 19, 2020, 9:46am UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/5 "2020-12-19T09:46:51Z")

</div>

Hey @MaxM .  
Thanks for the response.  
So let’s say there is meeting id (called x) which is created on another platform with different API key and signature.  
So you are saying that in ZoomMtg.join [method](https://zoom.github.io/sample-app-web/ZoomMtg.html#join), if we use our own **API Key** and **Signature** (which is created using our own **API KEY** and **API SECRET** ) then it should be enough for joining x meeting from another platform.  
So for joining 3rd party’s meeting we don’t need any JWT token.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [December 21, 2020, 10:55pm UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/6 "2020-12-21T22:55:12Z")

</div>

Hey @etibar,

Joining external meetings you just need the Web SDK signature to be generated and the respective config values. You do not need the external JWT App credentials (secret).

Does that make sense?

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [January 21, 2021, 8:55am UTC](https://devforum.zoom.us/t/fill-required-fields-from-3rd-party/38419/7 "2021-01-21T08:55:28Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
