# Multiple scopes in authorize url gives error

**URL:** <https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689>\
**Category:** Authentication\
**Created:** [June 27, 2024, 8:49pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689 "2024-06-27T20:49:50Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![rohan1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohan1/32/60975_2.png) [@rohan1](https://devforum.zoom.us/u/rohan1)\
**Post date:** [June 27, 2024, 8:49pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/1 "2024-06-27T20:49:50Z")

</div>

Adding multiple scopes in the authorization endpoint results in error in authorization redirect. Just adding 1 scope works fine.

Here is an example authorization url we created (some values left blank intentionally):

`https://zoom.us/oauth/authorize?response_type=code&client_id=&redirect_uri=&scope=user%3Aread%3Auser+meeting%3Awrite%3Ameeting`

The above url gives error `Oops! We were unable to complete your request. Please try again. (4,700)`. However when we follow the same url but with just one scope it works fine.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [June 28, 2024, 8:24pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/2 "2024-06-28T20:24:33Z")

</div>

Hi @rohan1  
Could you make sure that you added the redirect url in your oauth list please?

---

<div class="post-metadata">

**Author:** ![rohan1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohan1/32/60975_2.png) [@rohan1](https://devforum.zoom.us/u/rohan1)\
**Post date:** [June 28, 2024, 9:10pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/3 "2024-06-28T21:10:48Z")

</div>

Hi @elisa.zoom

Yes we have added redirectUrl in our oauth list. The url is working for us if we reduce the scope to one but not when adding multiple scope. So everything else should be okay.

Multiple scope url (DOES NOT WORK):  
`https://zoom.us/oauth/authorize?response_type=code&client_id=&redirect_uri=&scope=user%3Aread%3Auser+meeting%3Awrite%3Ameeting`

Single scope url (WORKS)  
`https://zoom.us/oauth/authorize?response_type=code&client_id=&redirect_uri=&scope=user%3Aread%3Auser`

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [July 1, 2024, 1:19pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/4 "2024-07-01T13:19:34Z")

</div>

Thanks for the update @rohan1  
I am not able to replicate this behavior on my end. I can authorize the app with however many scopes I add.  
Could you please share with me what are the scopes you are adding to double check on my end?

---

<div class="post-metadata">

**Author:** ![rohan1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rohan1/32/60975_2.png) [@rohan1](https://devforum.zoom.us/u/rohan1)\
**Post date:** [July 1, 2024, 3:58pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/5 "2024-07-01T15:58:44Z")

</div>

> [@rohan1](#):
>
> user%3Aread%3Auser+meeting%3Awrite%3Ameeting

We tried scopes `meeting:write:meeting` and `user:read:user` separated by space.  
See url below:  
`https://zoom.us/oauth/authorize?response_type=code&client_id=&redirect_uri=&scope=user%3Aread%3Auser+meeting%3Awrite%3Ameeting`

Wondering if there is some issue with url encoding or url format

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [July 2, 2024, 8:21pm UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/6 "2024-07-02T20:21:52Z")

</div>

It could be @rohan1  
If you add the scopes directly in the app, you should be able to authorize it.

---

<div class="post-metadata">

**Author:** ![yingbei](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/yingbei/32/57648_2.png) [@yingbei](https://devforum.zoom.us/u/yingbei)\
**Post date:** [January 6, 2025, 9:18am UTC](https://devforum.zoom.us/t/multiple-scopes-in-authorize-url-gives-error/112689/7 "2025-01-06T09:18:09Z")

</div>

The solution I found for this is:  
DO NOT include scopes in the authorization url. once I removed them it just works.