API Endpoint(s) and/or Zoom API Event(s)
[Get recordings] https://developers.zoom.us/docs/api/rest/reference/zoom-api/methods/#operation/recordingGet
Description
We’ve encountered an issue while attempting to download transcripts from a recording via the tenant-specific Zoom endpoint. While the calls to
api.zoom.us
are successful, we’re experiencing failures specifically with the tenant-specific URL for downloading recording transcripts, such as:
Download URL: Tenant-specific url from the Get recordings api - https://xyz.zoom.us/rec/download/<id>
Proper authorization header (with proper scopes - recording:read) is also passed in the request which works for the API calls through api.zoom.us
The download url above is received from API endpoint defined above.
Error?
Here’s a summary of the error we’re encountering:
Received response:
StatusCode: 403
Response Body:
<?xml version=\"1.0\" encoding=\"UTF-8\"?><Error><Code>AccessDenied</Code><Message>Access denied</Message></Error>
Response headers:
{
'Via': '1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront)',
'Connection': 'keep-alive',
'Date': 'Mon, 13 May 2024 23:07:11 GMT',
'X-Amz-Cf-Pop': 'SEA19-C3',
'Content-Type': 'text/xml',
'Server': 'CloudFront',
'X-Amz-Cf-Id': '1euWRAaICiztbrG07oD0VKNNIy1eeKmdKu9SuA0c437zRXVfnkfNWg==',
'X-Cache': 'Error from cloudfront',
'Content-Length': '110'
}
How To Reproduce
Steps to reproduce the behavior:
- Call user recordings api to get the recordings from a specific period
https://api.zoom.us/v2/users/me/recordings?from=1970-01-01&page_size=300&to=2024-05-14
- Use the download url for the transcript received from the above call and make another call to download the transcript while passing a proper authorization header.
Authentication method - OAuth2 against a Zoom app
Do we need to whitelist any IPs on the tenant-specific Zoom configuration? We are only seeing this happening in the application code but not while invoking the same download url through a light-weight rest client e.g. Curl.
Any help is very appreciated. Thanks.