# The same webhook sent from two different accounts

**URL:** <https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414>\
**Category:** API and Webhooks\
**Created:** [July 26, 2023, 6:39am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414 "2023-07-26T06:39:35Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [July 26, 2023, 6:39am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/1 "2023-07-26T06:39:35Z")

</div>

**Description**  
I’m an admin in our company account and I’ve set up webhooks sending from our two different accounts to our only endpoint that handles these webhooks.

**Error**  
The same webhook with the same request body is sent to our endpoint from both accounts. I distinguish the accounts by their secret tokens, but the request bodies are the same.

I need to split these webhooks because I need to handle them differently.

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [July 26, 2023, 7:54am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/2 "2023-07-26T07:54:35Z")

</div>

Why is a webhook related to the webinar created in one account is sent from the other account?

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [July 26, 2023, 2:55pm UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/3 "2023-07-26T14:55:55Z")

</div>

I’ve even set different endpoints on the local dev environment but I still receive two webhooks from different accounts related to a single webinar

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [July 27, 2023, 8:29am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/4 "2023-07-27T08:29:07Z")

</div>

I’ve also created a ticket in Customer Support but it was closed and I was addressed to this forum anyway

My ticket’s text:

> I have a problem with webhooks only app. I’ve created two apps in our different accounts with a single endpoint for them where I distinguish them by their secret token. The problem is when a user registers for a webinar in one of the accounts we receive two webhooks from both accounts with the same request body. I expected to receive one webhook from the account where a webinar was created.

---

<div class="post-metadata">

**Author:** ![ojus.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ojus.zoom/32/734_2.png) [@ojus.zoom](https://devforum.zoom.us/u/ojus.zoom)\
**Post date:** [July 28, 2023, 10:18pm UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/5 "2023-07-28T22:18:46Z")

</div>

@grosserg I am not sure I understand this correctly.

Please let me know if my understanding is correct:

You created app A, provided an endpoint, and then subscribed to lets say meeting events  
You created app B, provided the same endpoint and then subscribed to webinar events

You are saying that you received webinar events from app A even though you hadnt subscribed to them ?

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [July 31, 2023, 6:35am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/6 "2023-07-31T06:35:26Z")

</div>

Yes @ojus.zoom, something like this. Let me explain more accurately.

1. I created app A in account AC1, provided an endpoint and then subscribed to a webinar registered/joined events
2. Then I created an app B in account AC2, provided the same endpoint as in app A and then subscribed to the same webinar registered/joined events
3. I registered for a webinar from app A, and I received two webhooks with different signatures from both our accounts but with the same request body
4. The same happens when I register for a webinar from app B

I can say more, we had old apps for such events with the old authorization, which I disabled on Friday, and I left logging in case a webhook failed a signature checking, and after that, I figured out that we receive three webhooks, one from our old app and two from our new apps.  
But I as an admin can’t see these old apps in the list of created apps in our “Apps on Account” section.

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [August 4, 2023, 3:13pm UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/7 "2023-08-04T15:13:00Z")

</div>

Is anybody here at all?! Is anybody reading these topics?! 🤦‍♂️

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [August 16, 2023, 8:15am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/8 "2023-08-16T08:15:44Z")

</div>

Any help, please! 🙏 🙏 🙏

---

<div class="post-metadata">

**Author:** ![ojus.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/ojus.zoom/32/734_2.png) [@ojus.zoom](https://devforum.zoom.us/u/ojus.zoom)\
**Post date:** [August 16, 2023, 11:04pm UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/9 "2023-08-16T23:04:37Z")

</div>

@grosserg I apologize for the delay on this. I may need to look at the payload for both events. DM’d you for next steps

---

<div class="post-metadata">

**Author:** ![grosserg](https://avatars.discourse-cdn.com/v4/letter/g/90db22/32.png) [@grosserg](https://devforum.zoom.us/u/grosserg)\
**Post date:** [September 22, 2023, 5:48am UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/10 "2023-09-22T05:48:28Z")

</div>

Hi, @ojus.zoom! Any updates?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [September 24, 2024, 9:24pm UTC](https://devforum.zoom.us/t/the-same-webhook-sent-from-two-different-accounts/92414/11 "2024-09-24T21:24:37Z")

</div>

Closed on September 24, 2024, 9:24pm UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.
