Invalid Signature with Sample Web App

tommy · September 11, 2019, 5:28pm

Hey @peter.tysoe, thanks for reaching out and using Zoom!

Are you using the JWT App Type Credentials for the API_KEY and API_SECRET?

Also you must have at least a Pro Zoom account to use the SDK which could be the reason you are seeing that error. If you would like a free trial for development / testing purposes we can request that for you.

Thanks,
Tommy

peter.tysoe · September 11, 2019, 7:34pm

Thanks for the quick reply… using JWT created in zoom/developer build app
https://marketplace.zoom.us/develop/apps/xxxxxREMOVEDxxx/credentials is that wrong?

I have also upgraded my plan.
P

tommy · September 11, 2019, 7:46pm

Hey @peter.tysoe,

Happy to help! Perfect you are using JWT

Are you still getting the error after upgrading your plan? Also double check your JWT app is activated.

If that is still not working, can you send me the code you are using to generate your signature? Should look something like this

github.com

zoom/sample-app-web/blob/master/CDN/js/index.js#L45


    apiKey: API_KEY,
    apiSecret: API_SECRET,
    meetingNumber: parseInt(document.getElementById('meeting_number').value),
    userName: document.getElementById('display_name').value,
    passWord: "",
    leaveUrl: "https://zoom.us",
    role: 0
};




var signature = ZoomMtg.generateSignature({
    meetingNumber: meetConfig.meetingNumber,
    apiKey: meetConfig.apiKey,
    apiSecret: meetConfig.apiSecret,
    role: meetConfig.role,
    success: function(res){
        console.log(res.result);
    }
});


ZoomMtg.init({

Or this,

Thanks,
Tommy

peter.tysoe · September 12, 2019, 4:43pm

Hi Tommy code is as per your GIT

With my JWK … I am trying too connect to an open meeting PID209-601-8837 on a separate (free account) note I didn’t request passwords but I notice a lock symbol on the iPad next to the PID

Fail: Timeout (but instant)

Help appreciated.

P

tommy · September 12, 2019, 5:01pm

Hey @peter.tysoe,

Those credentials are SDK Credentials.

You must create a JWT app in order to use the Web SDK.

Thanks,
Tommy

szliuxi199908 · November 5, 2019, 8:20am

Hi,

I encountered the same “invalid signature” problem even when I set up a Zoom meeting and used the actual meeting ID without “-”. I followed the guidelines and did not change the javascript code except for replacing “Your API Key and Secret” with my actual ones. Here is the screenshot.

szliuxi199908 · November 5, 2019, 8:21am

Just to post another screenshot about my javascript code (new user is only allowed to post one image per time).

tommy · November 5, 2019, 9:49pm

Hey @szliuxi199908, thanks for posting and using Zoom!

Are you using a JWT App Type for the API key and secret?

Thanks,
Tommy

mchrenko · January 16, 2020, 1:37pm

Hi!
I am also experiencing this issue. Created a JWT App with key. Now what am I suppose to do with WebSDK? As of now I was generating signature and then passing it into init phase.
I can’t find any related (valid) documentation of steps necessary to join webinar with JWT access token.
Went through API docs, but can’t find related endpoint to which I should send my webinar ID and other params to obtain signature necessary for joining.
Thanks for help!

tommy · January 16, 2020, 7:50pm

Hey @mchrenko,

For joining a webinar with the Web SDK, make sure to set the email in the init function:

// Email required for Webinars
userEmail: meetConfig.userEmail,

Docs here:
https://marketplace.zoom.us/docs/sdk/native-sdks/web/essential/start-join-meeting

Please share screenshots, error messages, and the webinarID if you have additional issues.

Thanks,
Tommy

mchrenko · January 16, 2020, 8:17pm

Hi!
Thanks for quick reply. I do know all the other params necessary for joining webinars. I did use API keys for development, but once deployed on production stack, I am having an issue with webinar joining bcs of the signature. So my question is - how to generate signature when using JWT?

My join code looks like this

ZoomMtg.join({
        meetingNumber: meetingNumber,
        userName: userName,
        userEmail: userEmail,
        signature: ???signature???, // how to calculate it when using JWT?
        apiKey: ZOOM_API_KEY,
        passWord: webinarPassword,

Thanks for any kind of help.

tommy · January 16, 2020, 8:19pm

Hey @mchrenko,

Have you seen our docs on how to create a signature:

https://marketplace.zoom.us/docs/sdk/native-sdks/web/essential/signature

Thanks,
Tommy

mchrenko · January 16, 2020, 8:23pm

Yes, we were generating signature but the generated token is not working when passed into join method. It returns errorCode 1 - join failed.
When generating locally (using ZoomMtg.generateSignature) - joining works fine.
I am struggling getting to know differences between SDK API keys vs JWT.
Anyhow currently we have sample code for generating signature at our API and when trying to join webinar, we are failing with generic error (but the only thing that changes is signature, so I assume the reason behind this issue lies somewhere near).
Can you please be more specific when we must use JWT (and how to use it) and when we can use generating signature from sample code?

tommy · January 16, 2020, 8:28pm

Hey @mchrenko,

Yes it does sound like an issue generating the signature.

To use the Web SDK, you need to use a JWT App Type Key and Secret to generate the signature to authenticate.

To call the Zoom APIs, you can use the JWT Token.

Can you share the code you are using to generate the signature so I can help debug? Also make sure to use a real meeting ID.

Thanks,
Tommy

mchrenko · January 16, 2020, 8:39pm

Thanks for replies. But I think we do not understand completely.

My working solution:

generating signature on the front-end (like in the sample app), using WebSDK method ZoomMtg.generateSignature()

Since for generating signature you need ZOOM API KEY SECRET, we ported this very generate signature to our API.

My production not-so-working solution:

have our custom API zoom/signature that returns signature based on your sample code.
once using this signature, I can’t join the webinar with generic error message

We use real meeting ID (9 digits, no dashes)
As we were debugging this - WebSDK generateSignature returns slightly different signatures than your Node.js sample code. We put there the same timestamp, same meeting ID, same email and username with different signature results.

tommy · January 16, 2020, 8:57pm

Hey @mchrenko,

Please private message me the meetingID you are trying to join, as well as the signature you have generated that is throwing the error.

Thanks,
Tommy

mchrenko · January 21, 2020, 1:55pm

Thank you Tommy for helping me out!

tommy · January 21, 2020, 4:58pm

You are welcome @mchrenko!

For others reference, they were not correctly generating their signature.

Thanks,
Tommy

subodh.kedar · March 9, 2020, 9:31am

We are also getting the same error. Created jwt token, APi key and secret key. generated the signature but still getting same error “Invalid Signature”. Meeting number is “162168453”

tommy · March 9, 2020, 4:01pm

Hey @subodh.kedarm thanks for posting and using Zoom!

Can you please share your signature with me so I can debug?

Also, please checkout our sample signature code, and sample app.

Thanks,
Tommy