# Webhook application and OAuth use

**URL:** <https://devforum.zoom.us/t/webhook-application-and-oauth-use/49281>\
**Category:** API and Webhooks\
**Created:** [April 30, 2021, 1:02pm UTC](https://devforum.zoom.us/t/webhook-application-and-oauth-use/49281 "2021-04-30T13:02:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![daniel.kohn](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/daniel.kohn/32/18306_2.png) [@daniel.kohn](https://devforum.zoom.us/u/daniel.kohn)\
**Post date:** [April 30, 2021, 1:02pm UTC](https://devforum.zoom.us/t/webhook-application-and-oauth-use/49281/1 "2021-04-30T13:02:28Z")

</div>

I’ve been working on a Webhook only app and found out that those are not publishable on the Zoom marketplace. I am currently recreating the same app as an OAuth application.  
The app solely relies on the meeting.participant\_joined and meeting.participant\_left event subscriptions.

I already read in this thread [Webhooks and OAuth](https://devforum.zoom.us/t/webhooks-and-oauth/9887)  
that I don’t need to use the OAuth tokens and just to be sure:

Will I need them in the future in any way? Do I need to save them?

Since OAuth authentication is required to publish a Zoom application, is it enough if the redirect url return “Success” if the tokens could be retrieved (and “Error” if not)?

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [April 30, 2021, 10:59pm UTC](https://devforum.zoom.us/t/webhook-application-and-oauth-use/49281/2 "2021-04-30T22:59:06Z")

</div>

Hey @daniel.kohn,

Thank you for reaching out to the Zoom Developer Forum. If your app just relies on receiving Webhook events, you won’t need to use an Access Token in order to make calls to the API. However, you will want to complete the OAuth flow so that the app is successfully installed on the end user’s account. This means providing a real Redirect OAuth URI as well as using the code you receive at that endpoint to retrieve an access\_token.

Let me know if that helps.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [May 31, 2021, 8:59am UTC](https://devforum.zoom.us/t/webhook-application-and-oauth-use/49281/3 "2021-05-31T08:59:42Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.