OAuth with ZOOM Rest API from iOS

[tommy (Tommy Gaessler)]

Hey @spoulose,

@spoulose

However this is no more a problem as we have a https server URL used as OAuth redirect URI and server will call our app’s custom URL.

This is the correct flow.

@spoulose

Our main concern is related to Security.Since we integrate Zoom OAuth with iOS app, the client secret has to reside in application and it is not a recommenced way it seems.
Zoom documentation suggest to set ClientID:ClientSecret in Authorisation header while requesting token.

The Client Secret and request to get an access token should not be made on the frontend. After landing on the redirect url, you should send the code in the query param to your backend server to make the get access token request, and then send the access token to your frontend in your session or however you want to use it. The Client Secret should never touch your frontend application.

Does that make sense?

Thanks,
Tommy