# OAuth when adding app in marketplace

**URL:** <https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567>\
**Category:** API and Webhooks\
**Created:** [August 13, 2024, 11:50am UTC](https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567 "2024-08-13T11:50:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jblair](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jblair/32/52972_2.png) [@jblair](https://devforum.zoom.us/u/jblair)\
**Post date:** [August 13, 2024, 11:50am UTC](https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567/1 "2024-08-13T11:50:24Z")

</div>

#### I’m trying to create an app in the marketplace to use webhooks and the api to integrate with our users zoom phone. I created the app and when I go to add the app to my account it opens the zoom oauth permissions screen and then gets redirected to the url I provided where the user then has to login to our system? This whole flow is confusing to me, in other integrations oauth is initiated from our app and the user has to login and authorize permission on the partners site. Is there a different flow where oauth isn’t initiated on the marketplace and instead initiated on our side?

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [August 13, 2024, 4:44pm UTC](https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567/2 "2024-08-13T16:44:28Z")

</div>

Hey @jblair, pardon any confusion, I can see how our OAuth flow differs from other platforms. You have the option of allowing users to either start authorization from the App Marketplace (Authorization URL) or your own app.

Navigate to the Production settings of your app, then **App Listing** page and the Link & Support tab.

If you select _From Marketplace_, users can trigger authorization from the Install button on your app listing.

If you select _From your site_, users will go to your app to install the app.

 ![Screenshot 2024-08-13 at 10.33.16 AM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/a/d/ad8fe1bee2c7708aac96a35e5eb0a8779303d344.jpeg)

This would then allow you to choose when to trigger someone to kick out to the Zoom app authorization page using your authorization URL (say, a button that says “Connect your Zoom account”).

The authorization URL (which could be that button) would be:

`https://zoom.us/oauth/authorize?response_type=code&client_id={PROD_CLIENT_ID}&redirect_uri={REDIRECT_URL_TO_YOUR_APP}`

Docs on requesting a user’s authorization: [OAuth for user authorized apps](https://developers.zoom.us/docs/integrations/oauth/#using-a-server-with-or-without-pkce)

---

<div class="post-metadata">

**Author:** ![jblair](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jblair/32/52972_2.png) [@jblair](https://devforum.zoom.us/u/jblair)\
**Post date:** [August 13, 2024, 5:15pm UTC](https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567/3 "2024-08-13T17:15:26Z")

</div>

Oh, great, thanks!

So that setting is only under the “Production” tab, will that still work while it’s in development?

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [August 13, 2024, 6:27pm UTC](https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567/4 "2024-08-13T18:27:41Z")

</div>

Yes, becuase that setting will only ever matter when published as the only time a user can authorize from the Marketplace is after it is published (“production”). (This option affects the link on Zoom’s app marketplace listing page).

You can always use/create the authorization URL for your app to push someone to that app install screen (using Dev/Prod credentials) & prompt the OAuth flow.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [August 14, 2024, 6:27pm UTC](https://devforum.zoom.us/t/oauth-when-adding-app-in-marketplace/115567/5 "2024-08-14T18:27:46Z")

</div>

Closed on August 14, 2024, 6:27pm UTC

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.