Invalid redirect url (4700) even though I whitelisted the root domain

[gzg]

Description
We have a Zoom integration (Setster Appointment Scheduling) that is deployed on multiple servers which have different subdomains. For the main domain(www.setster.com), the application is working as expected, but from a server which uses a subdomain we receive the Invalid redirect url (4700) error. We added the any.setster.com as the redirect url and also added this to the withelist. We also added the full subdomain and domain url to the whitelist and still no luck.

Error
Invalid redirect: “the redirect url. removed this for security reasons” (4,700)

Which App Type (OAuth / Chatbot / JWT / Webhook)?
OAuth

[DeveloperBot]

Hey @gzg

Thanks for posting on the Zoom Devforum! I am still learning, but I will try my best to help answer your question.

Checkout this related thread that may have the answer you are looking for:

Invalid redirect url (4700) when whitelisting root domain on production sites

Hi, I have an app( called Xplan) that uses OAuth authorization and it is deployed to multiple servers. Each instance of the app has its own subdomain. There are over a thousand such subdomains, and it is not a static list. When a user on a site tries to authorize, the redirect url will be specific to that site, something like “https://subdomain1.topdomain.com/redirect”. Adding just “https://topdomain.com” to the whitelist was enough for OAuth redirection, and it works for our test sites. But t…

If this thread did not help, please let us know by replying back here and someone from the Developer Relations team will get back to you shortly.

Thanks,
DeveloperBot

[gzg]

We’ve looked over all items posted for this issue and most of the tickets end in “Everything is working now without us doing anything” so this won’t help us as we already tried the solutions from that ticket.

Thanks

[will.zoom]

Hey @gzg,

Thanks for reaching out about this, and happy to help.

Is it possible to share a screenshot of the error you’re running into, including the full URL in the browser when you run into this issue? If you could share your OAuth app settings as well, this will be helpful to debug.

If you haven’t yet seen this thread, please check this out as well:

Does zoom support more than two environments for oauth2?

Hey @tuancode, @michael.solomon, This is totally possible! Let me walk you through how to do this with the base domain of example.com For your whitelist, simply add your base domain: https://example.com Then in your dev/prod redirect url field, add a default redirect, https://any.example.com (this will be programmatically overridden to the correct sub domain, continue reading below) Now, with your install URL (the url mentioned in Step 1. of the OAuth guide) in your code, dyna…

Thanks,
Will

[gzg]

I’ve seen the thread and did that already but this did not help. Bellow you can find the required screenshots.

[gzg]

[will.zoom]

Hey @gzg,

Thanks for sharing these details. I just DM’d you to set up some time to debug further if it’s helpful.

Thanks,
Will