As a part of our continuing efforts to improve the security of Zoom OAuth App Types using Authorization flow, we are removing the ability to set the access tokens, refresh tokens and revoke tokens in the URL query parameters. This change will take effect on February 2023. It is strongly recommended …

I guess that no answer is an answer! :no_mouth:

We are looking at some options right now. I thought I would have an answer by now, but the stakeholders are still working through some things. I hope to know more by the end of the day.

[image] Shariq: There was another email communication that was sent in May of this year as well as an another email in August. There was also the announcement that you linked. I believe around spring time, the documentation was changed to reflect sending access_tokens via the headers. When yo…

@shariq.torres Hi Shariq! i was wondering if you have any updates ???

I need an update to this today to be able to make a business decision that won’t disrupt paying Zoom users.

Thank you @shariq.torres for the help there.

hi Shariq so no update tomorrow ? As others have said, is there an email service or forum we can follow to get more advanced notice of major changes ?

Thank you for listening to the audience and rallying the Zoom troops to push back this update. Really appreciate the team effort to ensure all of our customers can continue using Zoom and our own services. Hope you have a great weekend @shariq.torres

Hi Alyssa, Zoom APIs is more of a developer type of functionality within Zoom. If your organization is simply using the Web UI to generate meetings then this change will have no effect on your account. Thanks, Brandon

[Security Update] No token values in URL query parameters

API and Webhooks

shariq.torres (Shariq) November 18, 2022, 1:55am 38

We are going to delay enforcing this until Feb 2023. We apologize for the late communications on this.

Topic		Replies	Views
Developer impacting changes during COVID-19 API and Webhooks	116	25163	December 15, 2021
Problem / AccessDenied on Downloading files from a WebHook event API and Webhooks	17	12302	February 28, 2023
JWT apps to be deprecated in favor of Server-to-Server OAuth Authentication	46	9859	April 25, 2023
Secret Token Change - Zoom Apps Deauthorization Notification API and Webhooks	2	450	September 11, 2024
Finding the value for download_access_token for the Get meeting recordings API endpoint API and Webhooks recording , api	9	806	July 19, 2025

[Security Update] No token values in URL query parameters

Related topics