# Webhook from Zoom not including authorization header

**URL:** <https://devforum.zoom.us/t/webhook-from-zoom-not-including-authorization-header/141902>\
**Category:** API and Webhooks\
**Tags:** webhooks\
**Created:** [February 12, 2026, 11:22pm UTC](https://devforum.zoom.us/t/webhook-from-zoom-not-including-authorization-header/141902 "2026-02-12T23:22:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![aaronjohnson](https://avatars.discourse-cdn.com/v4/letter/a/919ad9/32.png) [@aaronjohnson](https://devforum.zoom.us/u/aaronjohnson)\
**Post date:** [February 12, 2026, 11:22pm UTC](https://devforum.zoom.us/t/webhook-from-zoom-not-including-authorization-header/141902/1 "2026-02-12T23:22:04Z")

</div>

Hi everyone,

We’ve had a Zoom application in the marketplace for a couple years… we average a _couple hundred thousand_ webhook requests back to our app, from Zoom, to our endpoints, _per day_, as documented here:

/docs/api/webhooks/#webhook-structure (can’t include the full URL because links aren’t allowed?)

Over the last week from Friday at ~4pm PST to Monday ~2pm PST, the incoming webhook did _not_ contain the header “authorization”, as documented in the above link… but then for a brief period on Tuesday, until about 8pm, we were getting that header… and now we’re back to not seeing the authorization header in the incoming webhooks.

I’ve verified that there’s nothing in place on our firewall or WAF that might be removing it… it just seems like there’s something happening on the Zoom side. Happy to provide any additional information if someone wants to take a deeper look.

---

<div class="post-metadata">

**Author:** ![aaronjohnson](https://avatars.discourse-cdn.com/v4/letter/a/919ad9/32.png) [@aaronjohnson](https://devforum.zoom.us/u/aaronjohnson)\
**Post date:** [February 17, 2026, 4:55pm UTC](https://devforum.zoom.us/t/webhook-from-zoom-not-including-authorization-header/141902/2 "2026-02-17T16:55:36Z")

</div>

help? Is anyone listening to this on the zoom side?

---

<div class="post-metadata">

**Author:** ![aaronjohnson](https://avatars.discourse-cdn.com/v4/letter/a/919ad9/32.png) [@aaronjohnson](https://devforum.zoom.us/u/aaronjohnson)\
**Post date:** [February 26, 2026, 6:57pm UTC](https://devforum.zoom.us/t/webhook-from-zoom-not-including-authorization-header/141902/3 "2026-02-26T18:57:12Z")

</div>

solved… apparently something changed on the Zoom side around Authentication Header Options, I don’t see anything in the change log but we’re back up and running now.

---

<div class="post-metadata">

**Author:** ![chunsiong.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/chunsiong.zoom/32/35488_2.png) [@chunsiong.zoom](https://devforum.zoom.us/u/chunsiong.zoom)\
**Post date:** [March 2, 2026, 6:55am UTC](https://devforum.zoom.us/t/webhook-from-zoom-not-including-authorization-header/141902/4 "2026-03-02T06:55:59Z")

</div>


