JWT apps to be deprecated in favor of Server-to-Server OAuth

[elisa.zoom (Elisa)]

Hey @ksks
I am trying to get more information on this for you.
I will come back with an update shortly.

Elisa

[ripul.ryu (Ripul)]

It would be great if you can also explain why this change

[elisa.zoom (Elisa)]

Hi @ripul.ryu

You will find all the information related to this deprecation here:

JWT App Type Deprecation FAQ

Cheers,
Elisa

[ksks (Ks)]

Hi,
Following up to see if there is answer for this yet, and also to ask if the JWT App Type will be deprecated at the same time for zoomgov.com.
Thank you,

[beirne]

Specifying the grant type of account_credentials with server-to-server OAuth gives me “unsupported grant type”. I can only get client_credentials to work. What might cause that?

[elisa.zoom (Elisa)]

hey @beirne feel free to follow along with this guide:

How to user Server-to-Sever OAuth app with Postman

How to use our Server-to-Server OAuth with Postman? As some of you might be aware of, our JWT app is being deprecated by June 2023 and we encourage you to migrate to the newly introduced Server-to-Server OAuth App That being said, here is a quick and simple guide on how to use or new app with Postman As stated in our documentation here: This new app type facilitates OAuth-authenticated requests between servers without end-user involvement. And this grant type enable your private server a…

[ksks (Ks)]

Hi,
When will Server-to-Server OAuth be available for zoomgov.com ?
Thanks,

[elisa.zoom (Elisa)]

Hi @ksks
Thanks for reaching out to the Zoom Developer Forum.
It will be available.
I do not have a specific Date for you but allow me ask to my team and will come back to you with an update shortly.

Best,
Elisa

[djoy (Dhanya)]

Hi @elisa.zoom

We are using this below API to join the call using JWT

Zoom Rooms API

With the JWT app deprecation/ switching to access token, what is the required scope to invoke this API?

[elisa.zoom (Elisa)]

Hi @djoy
Thanks for reaching out to the Zoom Developer Forum, I am happy to help here!
As far as I know, all the Zoom Room endpoints will eventually be available using our Server to Server.
Let me confirm the estimated timeline with the team.
Best,
Elisa

[david5 (David)]

Another thing to note, that isn’t obvious and not in the documentation (yet), is that you may need to build an access token rotation system. Each time you request an access token for a particular token index (by default, you only get one), it invalidates the previous access token.

Randomly receiving "Invalid access token" for Server-to-Server OAuth

Starting this week, we have started receiving a lot of errors when calling Zoom APIs with our Server-to-Server OAuth token. { "code": 124, "message": Invalid access token." } When I look at the access token in question, it has not expired…there’s plenty of time left. We also have logic in place to refresh the token well before it’s scheduled to expire. Has something changed about the way Server-to-Server OAuth access tokens are managed on the Zoom side? We’ve had to put in a retry mechanism…

[djoy (Dhanya)]

@david5

system. Each time you request

Thanks @david5 for bringing this into my attention. I am going to test this behavior.

[donte.zoom (Donte)]

Thanks for you sharing your insight and contributing to the Zoom Developer Forum, @david5 !

[ksks (Ks)]

Hi,
Following up on this:
When will Server-to-Server OAuth be available for zoomgov.com ?
Thanks,

[elisa.zoom (Elisa)]

Hi @ksks
I just reached out to some of my team members and will come back to you with an update shortly.
Best,
Elisa

[michael.curran (Michael)]

I am working with a customer who has created the server-to-server oauth app for his account, but his credentials get a 400 response

Is server-to-server oauth still not functional? Or is this because our fed moderate solution is considered a 3rd party app and that is not allowed yet?

[elisa.zoom (Elisa)]

Hi @michael.curran
Could you please open up a new topic describing your issue with details and we will take it from there!
Best,
Elisa

[michael.curran (Michael)]

Opened it here. Thank you!

Server-to-Server Oauth for 3rd Party connections in Zoom Gov

We have a Fedramp Moderate application that we host, and we allow zoom integration with the application. However, we have only tested non Fed Moderate Zoom server-to-server oauth, and that works seamlessly. When following the same instructions at marketplace.zoomgov.com, and create and app with server-to-server oauth, plug in the Zoom App ID, Client ID and Client Secret – we get a 400 response and the authentication does not complete. Is this a limitation of server-to-server oauth not being rea…

[sjensen (Steven)]

Will this server to server Oauth change effect how my organization uses SAML2.0 to authenticate with our IDP?

[htec]

Hi,
Is only JWT App type have been deprecated? In our case, we are using Meeting SDK for building mobile apps, but we are using JWT to initialise zoom SDK. Do we also need to migrate to Server-to-Server OAuth?
Thanks