# Server to Server App Authenticate Webhook

**URL:** <https://devforum.zoom.us/t/server-to-server-app-authenticate-webhook/111657>\
**Category:** Zoom Apps\
**Tags:** webhooks\
**Created:** [June 10, 2024, 1:39pm UTC](https://devforum.zoom.us/t/server-to-server-app-authenticate-webhook/111657 "2024-06-10T13:39:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gterry180](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gterry180/32/60496_2.png) [@gterry180](https://devforum.zoom.us/u/gterry180)\
**Post date:** [June 10, 2024, 1:39pm UTC](https://devforum.zoom.us/t/server-to-server-app-authenticate-webhook/111657/1 "2024-06-10T13:39:31Z")

</div>

First time setting up an app to receive webhooks from Zoom and it seems I have it configured properly, but it is failing to validate. Using the Zoom header option.

This is just for testing but I am receiving the plaintext and returning the json according to the documentation. I can see it is hitting my app and generating everything.

secret token  
sOpwKpA2S8mxexRNTCjc\_g

and I return Ok and this  
{“plainToken”:“97kB5eeiSUWTROaOjIJT8A”,“encryptedToken”:“AD9D671D4EAFA38BE746B35EDC0CDEEEF1E377C4B3A39791246858EF1C37A16F”}

https… ngrok-free.app/zoomwebhook using ngrok to test from dev local build

---

<div class="post-metadata">

**Author:** ![gterry180](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gterry180/32/60496_2.png) [@gterry180](https://devforum.zoom.us/u/gterry180)\
**Post date:** [June 10, 2024, 1:43pm UTC](https://devforum.zoom.us/t/server-to-server-app-authenticate-webhook/111657/2 "2024-06-10T13:43:00Z")

</div>

I just realized the Hash I created from C# was using all capital letters so just had to fix that, now it works.