Incorrect error message "Invalid redirect url" during OAuth authorization

[ansell (Steve)]

Description/Error
We have a fully working integration that is successfully creating meetings on behalf of our users so we are confident that the configuration (including the redirect_url) is all set up correctly. However, if a user enters the incorrect credentials when logging into the Zoom sign-in page (https://zoom.us/oauth/signin) then the user is re-directed to a page with an error message that reads “Invalid redirect url (4, 700)”.

Which Endpoint/s?
https://zoom.us/oauth/authorize

How To Reproduce (If applicable)
Steps to reproduce the behavior:

1. Load the URL https://zoom.us/oauth/authorize?response_type=code&client_id={clientId}&redirect_uri={redirectURL} without being logged into a zoom account.
2. Redirected to the login page https://zoom.us/oauth/signin?_rnd={randomNum}&client_id={clientId}&redirect_uri={redirectURL}&response_type=code
3. Type in a valid Zoom account with an incorrect password
4. Redirected to a page with an error message reading “Invalid redirect url (4,700)” rather than any indication of entering incorrect credenials

Screenshots (If applicable)

Additional context
As stated previously, this works properly if the correct credentials are entered so we know that the redirect URL is correct.

[tommy (Tommy Gaessler)]

Hey @ansell,

Wow nice find! This is defiantly a bug and we will work asap to fix it! JIRA: ZOOM-119463

I will post back here with updates!

Thanks,
Tommy

[ROHAN_KHAJURIA]

I am having the same problem. Any update on the progress of this fix?

[tommy (Tommy Gaessler)]

Hey @ROHAN_KHAJURIA,

Our team is looking into it. I will post back here with updates.

Thanks for your patience,
Tommy

[tommy (Tommy Gaessler)]

Hey @ROHAN_KHAJURIA, and @ansell,

We are releasing this fix at the end of this month (Dec).

Thanks,
Tommy

[tawandabrandon (Tawanda)]

Hi @Tommy has this issue been resolved? I am getting the same error

[tommy (Tommy Gaessler)]

Hey @tawandabrandon,

This issue was fixed in dec. Can you share steps to reproduce?

Thanks,
Tommy

[mmijovilcevich (Mario)]

Hi Tommy,
How are you?
I’m working on Zoom integration and I’m getting the same error when I try to use the ClientId 1q3Fw8wBQLg9qvB0pnsFQ
The error occurs when I try request user authorization.

Note 1: I implemented that part using like guideline this documentation https://marketplace.zoom.us/docs/guides/auth/oauth.
Note 2: I created a new App (GWu_IhzZSySH6FJmtWTx5g) using the same account and for this App, the authorization is working fine
.

[tommy (Tommy Gaessler)]

Hey @mmijovilcevich,

Which error occurs? The invalid redirect?

Make sure your redirect URL matches your whitelist URL.

Thanks,
Tommy

[mmijovilcevich (Mario)]

Hey Tommy!

Yes, the error “Invalid redirect url (4,700)”.
I had already added the redirect URL in “Whitelist URL”. Even with the redirect URL in the whitelist, I still having the “Invalid redirect url” error.

Could you help me, please?
Thanks,
Mario

[tommy (Tommy Gaessler)]

Hey @mmijovilcevich,

Can you share your OAuth request URL and screenshots of your redirect url and whitelist url in the marketplace?

Thanks,
Tommy

[mmijovilcevich (Mario)]

Hey Tommy,

Here are the screenshots you requested (since I’m a new user I can upload just one image):

This is the complete URL that I can see on my browser after the error:

Sign In | Zoom

As you can see, the redirect_uri is the one I sent on my request (as URL encoded format)
Thanks,
Mario

[tommy (Tommy Gaessler)]

Hey @mmijovilcevich,

Can you try without your state query param to see if that works?

I think since your state query param is not url encoded it is breaking the flow.

Thanks,
Tommy

[mmijovilcevich (Mario)]

Hey @tommy,

I already did that test and it didn’t work.
The error seems to be directly related to the application given that I’ve created other applications in the same account, with the same configuration, running the same request and they work correctly.
(You can take a look for example at the application with clientid GWu_IhzZSySH6FJmtWTx5g)

Thanks,
Mario

[bizstim.apps (Christopher)]

Last week the redirect url and authorization worked for me and now I too am getting this “Invalid redirect url (4,700)” error.

The only thing I did was proceed with the process of publishing the app.

[tommy (Tommy Gaessler)]

Hey @mmijovilcevich, @bizstim.apps,

Can you try regenerating your publishable or test url and seeing if that fixes the issue?

Thanks,
Tommy

[mmijovilcevich (Mario)]

Hey @tommy

I already did that with not luck. I created a new application in another account, using exactly the same information and it worked fine. Everything indicates that the problem is in that specific app.
Could you please investigate if the app with ClientID 1q3Fw8wBQLg9qvB0pnsFQ (Dev)
ClientID C0rNV8dRWm0_rJ7I90iMg (Prod) has any problem?

Thanks!

[tommy (Tommy Gaessler)]

Hey @mmijovilcevich,

Strange, I will look into why that app is having issues.

Thanks,
Tommy

[tommy (Tommy Gaessler)]

Hey @mmijovilcevich,

I attempted to install your app (C0rNV8dRWm0_rJ7I90iMg) on your account, and I did not see a redirect url error.

I did see this though:

Are you getting the redirect error when installing the dev or prod version?

Thanks,
Tommy

[mmijovilcevich (Mario)]

Hey @tommy,

You get that error because ZoomOAuthRedirect is expecting an additional query param: state (it can’t be null). In our workflow, redirect_uri includes the state query param.

Thanks,
Mario