As per the documentation https://marketplace.zoom.us/docs/guides/auth/oauth when we are getting access token and refresh token, we have to store in the database.
Is that the standard practice that is recommended to follow?
Good question—and yes, this would be a standard practice. The reason being, you will need to use the refresh_token that is returned alongside the access_token originally, in order to request a new access_token when it expires. (The purpose of the refresh token is to get a new access_token and refresh_token pair).
Let me know if this helps to clarify. 
Best,
Will
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.