Upgrading SDK version and switching from JWT app to Server-To-Server OAuth

nikola.sajic · May 3, 2023, 9:40am

Hello everyone. My explanation might be a bit longer, but I need to describe two ‘problems’ simultaneously.

Currently, we use JWT app for authentication and ApiKey and ApiSecret for signature generation, which is used for joining webinars from the frontend application. Since JWT app will be deprecated from 1st June, we have decided to switch to S2S OAuth. In the same time, we would like to increase SDK version in our React app from 2.1.1 to the latest (2.11.5) version. The difference between these two versions is that apiKey property does not exist any more, but from version 2.7.0, sdkKey should be used.

Current state is that we have created S2S OAuth app, but there are no sdkKey, only Cliend ID and Client secret.
I went through this document: https://developers.zoom.us/docs/internal-apps/jwt-app-migration/#detailed-steps-to-complete-the-migration
but I’m a bit confused about what all should be done.

Questions:

Can S2S OAuth app be used for generating signatures on the backend and providing sdkKey for the frontend application? Can Client ID be used for sdkKey?
If the answer to the first question is ‘NO’, should we create Meeting SDK as well, in order to get sdkKey? Is there a need for S2S OAuth if we need only signature generation functionality?

Thank you in advance for help!

chunsiong.zoom · May 4, 2023, 1:40am

Hi @nikola.sajic ,

In newer versions of Meeting SDK, you will need to use SDK App Type instead of JWT App Type.

When creating an SDK App Type, you will be given Client ID and Client Secret, these are your SDK Key and SDK Key respectively.

You should not need to use S2S OAuth App at all, unless you are calling our Zoom REST API.

nikola.sajic · May 10, 2023, 7:55am

Hi @chunsiong.zoom ,

Thank you for the response.

Just to see if I understood correctly.
We had only JWT app type, and it was used for both, communicating with the Zoom REST API and generating signature for Web SDK. Do we have now to create Meeting SDK in order to create signature and join webinars from our Web app, and also to create S2S OAuth in order to communicate with the Zoom REST API? Can ClientID and Client secret from S2S OAuth be used for generating signature for Web app and joining webinars and to avoid creating of Meeting SDK?

I’m asking this because we want to avoid interfering user to do authentication, and with Meeting SDK we need to provide URL for redirection:

Is it possible to keep the same flow as it was with JWT App type?

vishwajeetbhosale · May 10, 2023, 8:04am

Hi @nikola.sajic, I’m in same scenario where you are, difference is I’m having meeting and you are having webinars.

So, @chunsiong.zoom, Is it possible to keep the same flow as it was with JWT App type?
can we use same SDK Key & Secrete for meeting & API OR SDK is only for Web Meeting & OAuth for ZOOM Rest API (I’m using Get user, Get Meeting, Create Meeting, Create User etc.)

chunsiong.zoom · May 10, 2023, 8:55am

Hi @nikola.sajic

Question: Do we have now to create Meeting SDK in order to create signature and join webinars from our Web app, and also to create S2S OAuth in order to communicate with the Zoom REST API?
Answer: Yes

Question: Do we have now to create Meeting SDK in order to create signature and join webinars from our Web app, and also to create S2S OAuth in order to communicate with the Zoom REST API?
Answer: No, it will not work. You need to create a Meeting SDK App Type.

Depending on the situation, you can choose not to do OAuth using the credentials from Meeting SDK.

Question: Is it possible to keep the same flow as it was with JWT App type?
Answer: Depends on what you are doing, if you can share more details, I can advise you on it.

chunsiong.zoom · May 10, 2023, 8:57am

@vishwajeetbhosale

Question: Is it possible to keep the same flow as it was with JWT App type?
Answer: Could you elaborate on what is the “flow” you want to keep?

Question: Can we use same SDK Key & Secrete for meeting & API OR SDK is only for Web Meeting & OAuth for ZOOM Rest API (I’m using Get user, Get Meeting, Create Meeting, Create User etc.)

Answer: If you are using a recently created Meeting SDK App Type, you will have Client ID and Client Secret as your credentials. This can be used for Meeting SDK and OAuth access to Zoom REST API.

But do note, the reverse is not true. Server to Server OAuth Crendentials cannot be used for Meeting SDK

vishwajeetbhosale · May 10, 2023, 9:09am

@chunsiong.zoom, I’m calling Get user, Get Meeting, Create Meeting, Create User, Update meeting API so do I need to use OAuth or Server-2-Server OAuth app type?

nikola.sajic · May 10, 2023, 11:37am

Hi @chunsiong.zoom

In which cases I can choose not to do OAuth using credentials from Meeting SDK?

As you can see from the screenshot below, I cannot activate my Meeting SDK app because I did not add Redirect URL for OAuth.

How can I avoid this? What I want to achieve is to click join button on my web application and to perform join webinar method from zoom web sdk. In order to call join method from zoom web sdk, I need to provide sdkKey and signature. So I need ClientID and Client secret from Meeting SDK app in order to create signature and to call join method. How can I avoid redirection URL for OAuth because I do not want to do manual authentication?

chunsiong.zoom · May 10, 2023, 11:50am

@nikola.sajic ,

You should be able to use your app credentials now to join meeting.

You can ignore the redirect URL for OAuth and OAuth Allow List

chunsiong.zoom · May 10, 2023, 11:59am

I’m calling Get user, Get Meeting, Create Meeting, Create User, Update meeting API so do I need to use OAuth or Server-2-Server OAuth app type?

It sounds like you are intending to do actions which are account level wide.
If that is the case, you should be using Server to Server OAuth App Type

nikola.sajic · May 10, 2023, 12:05pm

@chunsiong.zoom ,

So you say that I can leave these two fields empty?

Can I ignore “Your app is not ready for users to add due to missing the following information” sentence?

chunsiong.zoom · May 15, 2023, 4:24am

If you are not intending to publish your SDK app, and you have no intention to access the user’s data using the OAuth REST API, then yes you can leave the 2 fields empty.

vishwajeetbhosale · May 16, 2023, 11:55am

@chunsiong.zoom user’s data means?

chunsiong.zoom · May 16, 2023, 1:11pm

@vishwajeetbhosale
Data which can be retrieved from these REST endpoints

https://developers.zoom.us/docs/integrations/oauth/#the-me-context

vishwajeetbhosale · May 22, 2023, 6:42pm

@nikola.sajic / @chunsiong.zoom, can you please share me the code to generate signature for meeting / initiate the meeting.
C#/Angular code will help or what you have and working.

chunsiong.zoom · May 23, 2023, 3:49am

@vishwajeetbhosale
https://developers.zoom.us/docs/meeting-sdk/auth/

nikola.sajic · May 23, 2023, 11:51am

You can find a code for token/signature creation on the github below:

github.com

apresence/ZoomJWT/blob/master/CZoomJWT.cs

namespace ZoomJWT
{
    using System;
    using System.IdentityModel.Tokens.Jwt;
    using System.Text;
    using Microsoft.IdentityModel.Tokens;

    /// <summary>
    /// Wrapper class for functions used to create Java Web Tokens for use with Zoom APIs.  At the time this library was written, the information on how to
    /// generate these tokens was not available in any one place, and a reliable implementation in C# could not be found.  This is an amalgamation of the
    /// following:
    ///   https://marketplace.zoom.us/docs/guides/auth/jwt
    ///   https://github.com/zoom/zoom-sdk-windows/blob/master/CHANGELOG.md#new-sdk-initialization-method-using-jwt-token
    ///   https://devforum.zoom.us/t/zoom-sdk-initialize-failed-when-running-the-sample-project/26511
    ///   https://devforum.zoom.us/t/how-to-create-jwt-token-using-rest-api-in-c/6620
    /// </summary>
    public static class CZoomJWT
    {
        /// <summary>
        /// Creates a Java Web Token for use with the Zoom Client SDK: https://marketplace.zoom.us/docs/sdk/native-sdks/introduction.

This file has been truncated. show original

That token should be used on the frontend side same as JWT App’s token was used, so the implementation on the frontend should not be changed, just use the sdkKey value from the Meeting SDK app and signature generated with the code from mentioned github repo.

@chunsiong.zoom thank you for your help! We have managed to switch on S2S OAuth.

vishwajeetbhosale · May 23, 2023, 2:08pm

@nikola.sajic , you mentioned like We have managed to switch on S2S OAuth, so you don’t need SDK APP any more? even for meeting init by host/ join by user.

nikola.sajic · May 23, 2023, 2:35pm

@vishwajeetbhosale, we are using only webinars, not meetings for now, but I believe it is the same thing. You need to create Meeting SDK (see attached image)

After you create that, you will get Client ID and Client Secret. These values are used for creating signature (which is further used by frontend app in order to join the meeting/webinar).

On the other hand, if you need to communicate with Zoom API from your backend service (for example creating webinars by communicating backend service with Zoom API), you need to create S2S OAuth as well.

So you need to separate these two things:

S2S OAuth should be used for communication in direction: your backend service → Zoom API (for instance creating meetings and webinars)
Meeting SDK should be used for joining meetings/webinars from the fronted app by calling ZoomMtg.join() method.

So basically, long story short, if you had with JWT app communication with the Zoom API and also used ZoomMtg.join for joining meetings from the frontend app, you will need created both, S2S OAuth and Meeting SDK.

vishwajeetbhosale · May 23, 2023, 2:44pm

@nikola.sajic , Thank your help, but still I’m struggling,
I have done same thing, I’m having Frontend application in Angular & Backend in .Net Core and now using Meeting SDK APP to start the meeting and Join the meeting and S2S app to generate token and call REST API.
As you suggested and share the code I’m passing Meeting SDK APP Key (now it is Client Id) & Secret (now it is Client secret) to CreateClientSDKToken in C# method & same Meeting SDK APP Key (now it is Client Id) passed in ZoomMtg.join() in sdkKey (See below image)

, but I’m getting below error.

Topic		Replies	Views
Upgrading SDK and Deprecation of JWT Upgrading SDKs jwt , sdk-jwt	3	760	August 8, 2023
Do I need to migrate my JWT app to server-to-server OAuth app if all I'm doing is to generate the signature on the backend to allow web client to join webinars via meeting SDK Web server-to-server , jwt	2	379	July 5, 2023
Using Meeting SDK with OAuth Meeting SDK s2s-oauth	1	356	August 28, 2023
Unsure about what to use Upgrading SDKs	3	300	October 3, 2023
JWT app migration Meetings api	1	449	November 23, 2022

Upgrading SDK version and switching from JWT app to Server-To-Server OAuth

Related Topics