User token expiration

[bragma (Marco)]

Description
Has the user token an expiration or does it change in any way during the user entity lifetime? I’m asking because the token is opaque and it is not clear how often do I need to get it.

Can it be stored in a secure way on my server and be reused without having to call the Zoom API?

Which App Type (OAuth / Chatbot / JWT / Webhook)?
JWT

Which Endpoint/s?
/users/{userId}/token

Thanks!

[tommy (Tommy Gaessler)]

Hey @bragma,

See the token expiration here:

Thanks,
Tommy

[bragma (Marco)]

Thanks, probably I needed to elaborate from the beginning.
Can I assume that the user token will not change and store it in another storage to avoid making an API call? It seems that ZAKs have expiration, but user tokens do not.

Thanks!

[tommy (Tommy Gaessler)]

Hey @bragma,

If you are finding that the user tokens don’t change, then yes, you can store.

Thanks,
Tommy

[bragma (Marco)]

I was expecting you to tell me if user tokens change and when!

My plan is to get them when users are created and store them (forever?) in my backend so I can get them when needed without having to go to the zoom api. If I am correct, they are needed to join meetings as host with mobile SDK, the zak is not enough.

Does it make sense?
Thanks!

[tommy (Tommy Gaessler)]

Hey @carson.zoom,

Can you confirm if user token changes or needs to be refreshed?

Thanks,
Tommy

[carson.zoom (Carson)]

Hey @bragma @tommy,

The token does not change for each User but the zak changes around every 2 hours. Users would need both of them to start a meeting with tokens in SDK.

Thanks!