# Guide: Making a Zoom API Call with OAuth Credentials in Postman

**URL:** <https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538>\
**Category:** API and Webhooks\
**Tags:** oauth, guide, postman, api-testing\
**Created:** [February 18, 2022, 6:58pm UTC](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538 "2022-02-18T18:58:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [February 18, 2022, 6:58pm UTC](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538/1 "2022-02-18T18:58:58Z")

</div>

To publish an app on the Zoom Marketplace you must create an [OAuth app](https://marketplace.zoom.us/docs/guides/build/oauth-app/).

When you’re ready to test making API calls, download the latest version of Postman and import the Zoom API collections following the steps outlined [here](https://marketplace.zoom.us/docs/guides/guides/postman/using-postman-to-test-zoom-apis/).

## There are Three Ways to Set up OAuth in Postman to Make API Requests

We’re going to go through three ways to set up our OAuth application credentials to successfully authorize and access the Zoom API to make requests.

### The “Easy” Difficulty OAuth 2.0 Set Up in Postman

We’re going to make a simple request to the [List Meetings API endpoint](https://marketplace.zoom.us/docs/api-reference/zoom-api/methods/#operation/meetingCreate) to retrieve upcoming scheduled meetings on my test developer account.

I’m going to set up my OAuth Authorization at the **meetings/{meetingsId} folder level** of the API, **but you can set up authorization at the individual endpoint or Zoom API collection level for your use case and preference:**

 ![Screen Shot 2022-02-18 at 12.17.03 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/4/d/4d8a49ffa3373f3c127a34e1efe4d67d5dff522c.png)

Now, **from the “type” drop down, select OAuth 2.0:**

 ![Screen Shot 2022-02-18 at 12.34.53 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/8/7/87294e4f4b22f1acc53720975752e95a3c904c77.png)

On the OAuth 2.0 page, set up the top half to look like mine:

 ![Screen Shot 2022-02-18 at 12.41.55 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/9/990e400b873f1652901d0eabb0a889275fff96f0.png)

Set up up the bottom half like this, naming your “Token Name” something that makes sense for you. **Since your client id and client secret are sensitive information, I have them [stored as variables in Postman](https://learning.postman.com/docs/sending-requests/variables/#variables-quick-start)** to easily pass through without compromising protection of the credentials for this demo:

 ![Screen Shot 2022-02-18 at 12.46.55 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/4/c/4cbe79fbc2e1b5495a4e4b07cc765d033ce00422.png)

_ **Make sure the “Callback URL” you use is added to the “Redirect URL for OAuth” and “OAuth Allow List” for the set of client secret/client id you’re using in the “App Credentials” page. If you do not do this, you will run into an authorization error because Postman will not be able to get the code parameter from the redirect that it needs to request your access token.** _

 ![Screen Shot 2022-02-18 at 12.59.41 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/4/3/432a7c00eb9c3f0dda5aa80069c56a8ae29bec49.png)

 ![Screen Shot 2022-02-18 at 1.04.05 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/2/a/2a5910df4eabbfdb12b5c6368326c960859538ba.png)

After you have done this, you are ready to press “Get New Access Token” 😀

 ![Screen Shot 2022-02-18 at 1.09.11 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/a/9ad63a7de89c01d3ce5832fbb5d8c957ac326ec3.png)

First you’ll see this page pop-up requesting you to authorize the app:

 ![Screen Shot 2022-02-18 at 1.12.59 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/5/3/53b530de2de27aa071e68328e6027242c35ac8b3.png)

After you click “authorize”, you’ll see this page saying that “your call is authenticated”:

 ![Screen Shot 2022-02-18 at 1.17.14 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/0/9/092f014e0edca0826338f128d951e4f1aac7ae33.png)

At the same time, you’ll see a confirmation message within the Postman client saying that the request was successful. It closes in \<5 seconds and will be replaced with the following page:

 ![Screen Shot 2022-02-18 at 1.15.37 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/9/7/970af2a737c9ce14eaa1db69929416b31fe1ab72.png)

Click “use token” and now we are ready to make a request to the “List Meetings” API endpoint! Make sure it’s set to GET by the request URL since that is [the type of HTTP REST request](https://www.codecademy.com/article/what-is-rest) we’ll be making.

 ![Screen Shot 2022-02-18 at 1.29.29 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/f/1/f1e482d14f753c58cab38a7505a7f0f686669f63.png)

I go to “Params” to remove the default options populated by Postman that are not needed and only leave “access\_token”. There are other parameters you _can_ include though! [Check the documentation](https://marketplace.zoom.us/docs/api-reference/zoom-api/methods/#operation/meetings) for the options. I also do not need to edit my “Headers” or “Body” right now because I just need {userId} or in my case specifically, {me} for this endpoint since I’m checking my own meetings.

 ![Screen Shot 2022-02-18 at 1.29.29 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/f/1/f1e482d14f753c58cab38a7505a7f0f686669f63.png)

Now I click “Send” and I see the response body in JSON format directly below!

 ![Screen Shot 2022-02-18 at 1.45.47 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/8/7/87e023196a4bcfa490f66cb15987cdd1549f1bb0.png)

**Congratulations, you’ve completed The “Easy” Difficulty OAuth 2.0 Set Up in Postman!**

### The “Medium” Difficulty OAuth 2.0 Set Up in Postman

Please reference our Postman Workspace for full guidance on this process: [Postman](https://www.postman.com/zoom-developer/workspace/zoom-public-workspace/folder/22097587-b5e6922b-9d73-4212-93eb-5a7ebcc241ba)

### The “More Complex” Difficulty OAuth 2.0 PKCE Set Up in Postman

For a walk through on this process, check out fellow Developer Advocate @donte.zoom guide here:

> [@Zoom OAuth 2.0 Proof Key for Code Exchange (PKCE) Flow](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830/2):
>
> Zoom OAuth 2.0 PKCE Flow: In Postman Step 1: [Getting an Access Token](https://marketplace.zoom.us/docs/guides/auth/oauth/#getting-an-access-token) A. Direct the user to https://zoom.us/oauth/authorize with the following query parameters: Postman Authorization Tab Configuration: Under the Authorization tab of any request, select OAuth 2.0.Select Get New Access Token. From there, select a Grant Type of Authorization Code (With PKCE), and click Authorize using the browser checkbox. In the Auth URL field, enter Zoom Auth…

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [February 18, 2022, 9:58pm UTC](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538/2 "2022-02-18T21:58:53Z")

</div>

~~For making requests in Postman with JWT, follow this guide: [Make an Example API Call in Postman](https://marketplace.zoom.us/docs/guides/guides/postman/using-postman-to-test-zoom-apis/make-an-example-api-call-in-postman)~~

JWT app types will be deprecated June 2023. Please migrate to Server-to-Server OAuth App type: [Create a Server-to-Server OAuth App](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app)

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [February 24, 2022, 9:48pm UTC](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538/3 "2022-02-24T21:48:17Z")

</div>

To automate OAuth2 token renewal in Postman, please refer to this post:

> [@How to Automate OAuth2 Token Renewal in Postman](https://devforum.zoom.us/t/how-to-automate-oauth2-token-renewal-in-postman/64847):
>
> [https://allenheltondev.medium.com/how-to-automate-oauth2-token-renewal-in-postman-864420d381a0](https://allenheltondev.medium.com/how-to-automate-oauth2-token-renewal-in-postman-864420d381a0) For help with setting up Postman to test requests, refer to this guide: [https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538) Thank you, Gianni

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [March 27, 2022, 7:48am UTC](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538/4 "2022-03-27T07:48:20Z")

</div>

Closed on March 27, 2022, 7:48am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [September 30, 2022, 3:30pm UTC](https://devforum.zoom.us/t/guide-making-a-zoom-api-call-with-oauth-credentials-in-postman/64538/5 "2022-09-30T15:30:51Z")

</div>

### Update

We have a Postman public workspace! Check it out:

> [@Zoom API Testing Made Easy with Postman Public Workspace](https://devforum.zoom.us/t/zoom-api-testing-made-easy-with-postman-public-workspace/75062):
>
> Article originally posted on [dev.to](https://dev.to/zoom/zoom-api-testing-made-easy-with-postman-public-workspace-5fh7) If you’re a developer or technical decision maker using Zoom APIs to: hammer_and_wrench build a customized video communications experience or, speaking_head tell impactful business intelligence stories, …it’s now easier than ever to test those APIs in a curated way! We’ve created a [Postman public workspace](https://www.postman.com/zoom-developer/workspace/zoom-public-workspace/overview) with done-for-you workflows to get access to and make streamlined requests to Zoom API endpoints. [Image description] How to Use Zoom’s Public …