Multiple scopes authorization

API Endpoint(s) and/or Zoom API Event(s)

OAuth Authorization (/v2/authorize)

Description

I’m trying to authorize my app with multiple granular scopes:

  • user:read:email:admin

  • meeting:read:meeting:admin

Each scope works individually, but the authorization fails when both scopes are requested together in a single OAuth URL.

App is Ready for local test

There is similar topic about this issue: OAuth Error 4700 When Using Multiple Scopes (user:read:user and meeting:read:list_meetings)

Error

invalid scope

How to Reproduce

The following URLs demonstrate the issue:

:check_mark: Works (single scope)

https://marketplace.zoom.us/v2/authorize?client_id=123&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Foauth%2Fcallback&scope=meeting:read:meeting:admin%20user:read:email:admin&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJleHAiOjE3NjMxMTc1MDcsImlhdCI6MTc2MzExNzIwNywiY3NyZl90b2tlbiI6eyJ2YWx1ZSI6IjZlMTE3NmE1LWQzMTUtNDY0Yy04ODUyLTVlMjA4ZjdmZTk2MCIsInNpdGVfaG9zdCI6ImxvY2FsaG9zdDozMDAwIn19.R_xxwh1d11ekRcb5gzxvWtcrykTfpoV7Pb2G1DU_iHEn1YQXZxWO6iUd-0OkxT4NWL6FhOAWHLdHVFAKn5HI2w&_zmp_login_state=4KwhixIwRZWoMSmTPc1HYw

:check_mark: Works (single scope)

https://marketplace.zoom.us/v2/authorize?client_id=123&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Foauth%2Fcallback&scope=user:read:email:admin&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJleHAiOjE3NjMxMTc1MDcsImlhdCI6MTc2MzExNzIwNywiY3NyZl90b2tlbiI6eyJ2YWx1ZSI6IjZlMTE3NmE1LWQzMTUtNDY0Yy04ODUyLTVlMjA4ZjdmZTk2MCIsInNpdGVfaG9zdCI6ImxvY2FsaG9zdDozMDAwIn19.R_xxwh1d11ekRcb5gzxvWtcrykTfpoV7Pb2G1DU_iHEn1YQXZxWO6iUd-0OkxT4NWL6FhOAWHLdHVFAKn5HI2w&_zmp_login_state=4KwhixIwRZWoMSmTPc1HYw

Fails (multiple scopes)

https://marketplace.zoom.us/v2/authorize?client_id=123&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Foauth%2Fcallback&scope=meeting:read:meeting:admin%20user:read:email:admin&state=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJleHAiOjE3NjMxMTc1MDcsImlhdCI6MTc2MzExNzIwNywiY3NyZl90b2tlbiI6eyJ2YWx1ZSI6IjZlMTE3NmE1LWQzMTUtNDY0Yy04ODUyLTVlMjA4ZjdmZTk2MCIsInNpdGVfaG9zdCI6ImxvY2FsaG9zdDozMDAwIn19.R_xxwh1d11ekRcb5gzxvWtcrykTfpoV7Pb2G1DU_iHEn1YQXZxWO6iUd-0OkxT4NWL6FhOAWHLdHVFAKn5HI2w&_zmp_login_state=4KwhixIwRZWoMSmTPc1HYw

3 Likes

Hi @demo_zoom_demosandbo , are you trying to add the scopes programmatically or you have them added to the app? The apps are designed to be scoped on the Zoom Marketplace portal. Please add all the scopes in the portal, save, and then proceed with authorization and getting the valid access token.

2 Likes

Hi Gianni, all scopes have been added to the app. I’m following Integrations - OAuth scopes to set the required scopes for the app for this authorization attempt

3 Likes

Can you please record a short video of this happening when you re-authorize your app (keeping the scopes) and attempt to generate a new access token? I will private message you so you can send the recording (it can be a Zoom recording). Please also share your client id in that message. You’ll see it in your notifications.

1 Like

Thanks, Gianni — PM sent.

Thanks so much @demo_zoom_demosandbo , investigating this issue with our service engineers. (ZSEE-186899)

Hi @demo_zoom_demosandbo , Thank you for your patience. Could you please provide the following:

  • HAR file for the failed request (instructions in this guide)

  • Also, I see for the failed request, it says “edit of web portal.” Could you please share where it takes you when you click on that link?

Hi @demo_zoom_demosandbo , just following up on this.