# How to implement In-client OAuth

**URL:** <https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230>\
**Category:** Zoom Apps\
**Created:** [April 27, 2022, 10:06pm UTC](https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230 "2022-04-27T22:06:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jaaydenh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jaaydenh/32/36112_2.png) [@jaaydenh](https://devforum.zoom.us/u/jaaydenh)\
**Post date:** [April 27, 2022, 10:06pm UTC](https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230/1 "2022-04-27T22:06:46Z")

</div>

I have turned on the setting for In-client OAuth and now when I try to add and authorize this app, I get this error “We’re still figuring things on are end…”. I am attempting to do this is a non-production environment.

Are there any limitations for testing this? and is there any information about any specific steps that are needed to allow this to work as expected?

My expectation is that the authorize page with the accept/decline buttons would be displayed in a webview in the Zoom client.

 ![Screen Shot 2022-04-27 at 22.56.39](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/5/a/5a37f263b3d355f02bd93a1205d6caf503d3c1c7.png)

---

<div class="post-metadata">

**Author:** ![ash.provost](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ash.provost/32/36610_2.png) [@ash.provost](https://devforum.zoom.us/u/ash.provost)\
**Post date:** [May 2, 2022, 6:30pm UTC](https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230/2 "2022-05-02T18:30:13Z")

</div>

Hey there, be sure you have added the home url in oauth allow list in addition to enabling in-client oauth in marketplace build flow. Also, make sure the redirectUri you are passing in to “onAuthorized()” matches the OAuth redirect uri you added in marketplace build flow.

---

<div class="post-metadata">

**Author:** ![jaaydenh](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jaaydenh/32/36112_2.png) [@jaaydenh](https://devforum.zoom.us/u/jaaydenh)\
**Post date:** [May 4, 2022, 4:39pm UTC](https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230/3 "2022-05-04T16:39:32Z")

</div>

I have added the home url to the oauth allow list and now I am able to see the in-client auth screen.

Is there any documentation yet that explains what is required for in-client auth?

The second issue I am having is that after authenticating, the app is designed immediately on startup to make a rest api call to users/me ([Zoom Meeting API](https://marketplace.zoom.us/docs/api-reference/zoom-api/methods#operation/user)) but in this case after authenticating with in-client auth, I am getting a 401 response and the error {“code”:124,“message”:“Invalid access token.”}

If I refresh the app, I do have a valid access token and things work as expected.

---

<div class="post-metadata">

**Author:** ![greyoung](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/greyoung/32/36232_2.png) [@greyoung](https://devforum.zoom.us/u/greyoung)\
**Post date:** [May 5, 2022, 10:58pm UTC](https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230/4 "2022-05-05T22:58:48Z")

</div>

> [@jaaydenh](#):
>
> Is there any documentation yet that explains what is required for in-client auth?

I’d like to strongly second this request. It would be great to have a walk-through of the setup.

---

<div class="post-metadata">

**Author:** ![ash.provost](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ash.provost/32/36610_2.png) [@ash.provost](https://devforum.zoom.us/u/ash.provost)\
**Post date:** [May 9, 2022, 3:48pm UTC](https://devforum.zoom.us/t/how-to-implement-in-client-oauth/68230/5 "2022-05-09T15:48:42Z")

</div>

After discussing this with the team, we are not recommending partners use OAuth at this moment - we are iterating to fix kinks in the process.

To comment on issues you may be facing though, if you are getting access tokens for the Zoom API during the web install flow, you will NOT have the access tokens in-client if you do the in-client install
