Same here - not published with no intent to do so either, as this application is proprietary.
Iâve found the OAuth exchange by monitoring the network console in the browser (important details redacted). The authorization process appears to encounter an issue, resulting in a redirection to a retry authorization endpoint (https://zoom.us/oauth/retry/authorize):
Summary
URL: https://zoom.us/oauth/authorize?client_id=REDACTED&response_type=code&redirect_uri=https%3A%2F%2Fyour-redirect-uri&scope=phone%3Aread%20meeting%3Aread%20user%3Aread&state=REDACTED
URL: https://zoom.us/oauth/signin?_rnd=REDACTED&client_id=REDACTED&redirect_uri=https%3A%2F%2Fyour-redirect-uri&response_type=code&state=REDACTED&scope=phone:read%20meeting:read%20user:read
URL: https://marketplace.zoom.us/authorize?client_id=REDACTED&response_type=code&redirect_uri=https%3A%2F%2Fyour-redirect-uri&scope=phone:read%20meeting:read%20user:read&state=REDACTED&_zmp_login_state=REDACTED
URL: Error - Zoom
Status: 200
Source: Network
Address: 170.114.52.2:443
Request
GET /oauth/authorize
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Referer: https://your-redirect-uri/
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
Redirect Response
302
Date: Fri, 28 Jun 2024 16:40:25 GMT
Location: https://zoom.us/oauth/signin?_rnd=REDACTED&client_id=REDACTED&redirect_uri=https%3A%2F%2Fyour-redirect-uri&response_type=code&state=REDACTED&scope=phone:read meeting:read user:read
Referrer-Policy: strict-origin-when-cross-origin
Request
GET /oauth/signin
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Referer: https://your-redirect-uri/
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
Redirect Response
302
Date: Fri, 28 Jun 2024 16:40:25 GMT
Location: https://marketplace.zoom.us/authorize?client_id=REDACTED&response_type=code&redirect_uri=https%3A%2F%2Fyour-redirect-uri&scope=phone:read meeting:read user:read&state=REDACTED&_zmp_login_state=REDACTED
Referrer-Policy: strict-origin-when-cross-origin
Request
GET /authorize
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Referer: https://your-redirect-uri/
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
Redirect Response
302
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Date: Fri, 28 Jun 2024 16:40:25 GMT
Expires: 0
Location: Error - Zoom
Pragma: no-cache
Request
:method: GET
:scheme: https
:authority: zoom.us
:path: /oauth/retry/authorize/REDACTED
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Connection: keep-alive
Cookie: _zm_date_format=mm/dd/yy; _zm_lang=en-US; _zm_mkt_aid=REDACTED; _zm_mkt_haid=79; _zm_o2nd=REDACTED; _zm_ssid=us02_c_REDACTED; cred=REDACTED; OnetrustActiveGroups=C0001; OptanonConsent=REDACTED; _zm_currency=USD; __cf_bm=REDACTED; _zm_cdn_blocked=log_unblk; _marketplace_auth_id=REDACTED; _zm_cid2=REDACTED; _zm_login_acctype=6; _zm_page_auth=us02_c_REDACTED; zm_aid=REDACTED; zm_cluster=us02; zm_haid=79; _zm_fingerprint=REDACTED; wULrMv6t=REDACTED; _zm_users_page_size=15; coveo_visitorId=REDACTED; _zm_csp_script_nonce=REDACTED; OptanonAlertBoxClosed=2024-06-24T19:23:24.785Z; _zm_svn=cfsvcs; _zm_mtk_guid=REDACTED; _zm_visitor_guid=REDACTED
Host: zoom.us
Referer: https://your-redirect-uri/
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
Response
:status: 200
Alt-Svc: h3=â:443â; ma=86400
cf-cache-status: DYNAMIC
cf-ray: REDACTED
Content-Encoding: gzip
Content-Language: en-US
Content-Security-Policy: upgrade-insecure-requests; default-src https://*.zoom.us https://zoom.us blob: âselfâ; img-src https: about: blob: data: âselfâ; style-src https: safari-extension: chrome-extension: âunsafe-inlineâ data: âselfâ; font-src https: safari-extension: chrome-extension: blob: data: âselfâ; connect-src * about: blob: data: âselfâ; media-src * rtmp: blob: data: âselfâ; frame-src https: ms-appx-web: zoommtg: zoomus: wvjbscheme: zoomprc: data: blob: âselfâ; object-src ânoneâ; base-uri ânoneâ;script-src âselfâ âstrict-dynamicâ ânonce-REDACTEDâ blob: https:;
Content-Type: text/html;charset=utf-8
Date: Fri, 28 Jun 2024 16:40:26 GMT
nel: {âsuccess_fractionâ:0.01,âreport_toâ:âcf-nelâ,âmax_ageâ:604800}
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {âendpointsâ:[{âurlâ:âhttps://a.nel.cloudflare.com/report/v4?s=REDACTEDâ}],âgroupâ:âcf-nelâ,âmax_ageâ:604800}
Server: cloudflare
Set-Cookie: _zm_ssid=us02_c_REDACTED; Domain=zoom.us; Path=/; Secure; HttpOnly
Set-Cookie: cred=REDACTED; Path=/; Secure; HttpOnly
Set-Cookie: _zm_ctaid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=zoom.us; Path=/; Secure; HttpOnly
Set-Cookie: _zm_chtaid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=zoom.us; Path=/; Secure; HttpOnly
Set-Cookie: _zm_lang=en-US; Max-Age=31536000; Expires=Sat, 28 Jun 2025 16:40:26 GMT; Domain=zoom.us; Path=/; Secure
Set-Cookie: _zm_date_format=mm/dd/yy; Domain=zoom.us; Path=/; Secure
Set-Cookie: _zm_ctaid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=zoom.us; Path=/; Secure; HttpOnly
Set-Cookie: _zm_chtaid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=zoom.us; Path=/; Secure; Http
Maybe @josh.dharmanandan you can confirm if youâre seeing something similar?