JWT token security

[rgood (Ryan)]

I’m planning on using JWT to access the zoom api on my website. I have some concerns around the security that I’m hoping someone can help me out. If the jwt token is a part of the http request wouldn’t it show up in chome developer tools for example? Then a user could technically take that token and do anything with the api until that token expires. How do I protect against this?

[DeveloperBot]

Hey @rgood

Thanks for posting on the Zoom Devforum! I am still learning, but I will try my best to help answer your question.

Checkout these related threads that may have the answer you are looking for:

Request Meeting on API Security

Hello, I am trying to use the Zoom APIs to pass registrations from my form to Zoom. I am concerned about the security of using the API. From what I understand from the documentation, the oauth token is written in plain text. Thus, if someone views the source code on my webpage, they would be able to view the oauth token written in plain text. If they can view the oauth token, they can use that token and the rest of the API documentation to write an API that will delete a meeting or do other thi…

How to create JWT token using REST api in c#

Hi, how to create JWT token using REST api in c#

If these threads did not help, please let us know by replying back here and someone from the Developer Relations team will get back to you shortly.

Thanks,
DeveloperBot