Login to Zoom will be required if a user needs to authorize an app and they’re not already logged in. However, to refresh an access_token, login should not be necessary. To clarify, is this user being directed to this page before installing the app?
Let me know if you can provide some additional context.