# Invalid signature using Web SDK

**URL:** <https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614>\
**Category:** Web\
**Created:** [March 25, 2021, 5:29pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614 "2021-03-25T17:29:39Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![russliu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/russliu/32/20091_2.png) [@russliu](https://devforum.zoom.us/u/russliu)\
**Post date:** [March 25, 2021, 5:29pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/1 "2021-03-25T17:29:39Z")

</div>

**Description**  
working on a simple page using Web SDK to join a meeting, getting invalid signature error after trying various methods of generate the signature. Could anyone please help to see what could be the reason? Thanks in Advance!

**Error**

1. {method: “join”, status: false, result: “Invalid signature.”, errorMessage: undefined, errorCode: 3712}
2. errorCode: 3712
3. errorMessage: undefined
4. method: “join”
5. result: “Invalid signature.”

**Which Web Client SDK version?**  
using latest 1.9.1 web sdk through CDN

**Device (please complete the following information):**

- Browser: [Chrome]

**Additional context**  
using SDK credentials  
meetingID: [REDACTED]  
signature generated using the node.js from: [https://github.com/zoom/websdk-sample-signature-node.js:](https://github.com/zoom/websdk-sample-signature-node.js:) [REDACTED]

signature generated using ZoomMtg.generateSignature(): [REDACTED]

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [March 26, 2021, 9:09pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/2 "2021-03-26T21:09:29Z")

</div>

Hey @russliu,

Thank you for reaching out to the Zoom Developer Forum. It looks like you’re using an SDK key and secret. When it comes to the [Web SDK](https://marketplace.zoom.us/docs/sdk/native-sdks/web#zoom-web-sdk), make sure that you are using a [JWT App](https://marketplace.zoom.us/docs/guides/auth/jwt)’s API Key and Secret.

Let me know if that helps.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![Michael\_prox](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_prox/32/30621_2.png) [@Michael\_prox](https://devforum.zoom.us/u/Michael_prox)\
**Post date:** [April 5, 2021, 11:09pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/3 "2021-04-05T23:09:41Z")

</div>

Also getting this.

I have tried signature generation from:

- the docs ([https://marketplace.zoom.us/docs/sdk/native-sdks/web/build/signature](https://marketplace.zoom.us/docs/sdk/native-sdks/web/build/signature))
- the signature generation app ([websdk-sample-signature-node.js/index.js at master · zoom/websdk-sample-signature-node.js · GitHub](https://github.com/zoom/websdk-sample-signature-node.js/blob/master/index.js))

I have tried my keys from:

- an SDK Zoom App
- a JWT Zoom App

---

<div class="post-metadata">

**Author:** ![Michael\_prox](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_prox/32/30621_2.png) [@Michael\_prox](https://devforum.zoom.us/u/Michael_prox)\
**Post date:** [April 5, 2021, 11:16pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/4 "2021-04-05T23:16:33Z")

</div>

I’ve also tried the code from [https://marketplace.zoom.us/docs/sdk/sdk-reference/web-reference](https://marketplace.zoom.us/docs/sdk/sdk-reference/web-reference)

Man, that’s 3 different sources of un-truth for one API.

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [April 6, 2021, 4:37pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/5 "2021-04-06T16:37:21Z")

</div>

Hey @Michael_prox,

All three of the methods that you listed to generate a signature are valid so there might be something else going on here. Please send an email to [developersupport@zoom.us](mailto:developersupport@zoom.us) with a link to this thread.

In that ticket, please include the signature that you’re using when you see this issue. I’ll be sure to follow up with you there.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![Michael\_prox](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_prox/32/30621_2.png) [@Michael\_prox](https://devforum.zoom.us/u/Michael_prox)\
**Post date:** [April 6, 2021, 5:49pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/6 "2021-04-06T17:49:09Z")

</div>

I was still using the SDK keys on the front-end. It works with JWT keys for front and back end.  
Which is BAFFLING by the way and the docs are not remotely clear on this; what are SDK apps even for if not… to use the SDK?

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [April 7, 2021, 8:39pm UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/7 "2021-04-07T20:39:39Z")

</div>

Hey @Michael_prox,

I’m glad to hear that you got it working. I agree that our documentation around this is confusing and it’s something we are working on improving. To clarify, the SDK App type is used for the other Client SDKs (macOS, iOS, Windows, Android). However, when it comes to the [Web SDK](https://marketplace.zoom.us/docs/sdk/native-sdks/web#zoom-web-sdk), we use JWT credentials.

I definitely understand how that can be confusing. Let me know if you have any questions.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [May 8, 2021, 6:39am UTC](https://devforum.zoom.us/t/invalid-signature-using-web-sdk/46614/8 "2021-05-08T06:39:42Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
