# Webhook missing authorization header

**URL:** <https://devforum.zoom.us/t/webhook-missing-authorization-header/11999>\
**Category:** API and Webhooks\
**Created:** [April 7, 2020, 9:04pm UTC](https://devforum.zoom.us/t/webhook-missing-authorization-header/11999 "2020-04-07T21:04:49Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![dojohnso](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dojohnso/32/5414_2.png) [@dojohnso](https://devforum.zoom.us/u/dojohnso)\
**Post date:** [April 7, 2020, 9:04pm UTC](https://devforum.zoom.us/t/webhook-missing-authorization-header/11999/1 "2020-04-07T21:04:49Z")

</div>

**Description**  
I set up a webhook app in the marketplace to notify my endpoint at meeting start and meeting end. I don’t see authorization in the header. Using php, getallheaders(), returns this:

```
Array
(
    [User-Agent] => Zoom Marketplace/1.0a
    [Connection] => close
    [Host] => [my host]
    [Content-Length] => 341
    [Content-Type] => application/json; charset=utf-8
    [X-Zm-Trackingid] => Webhook_[id string]
    [Clientid] => [id string]
)

```

Should I be getting that a different way?

**Error**  
n/a

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
webhook, meeting start and meeting end.

**Which Endpoint/s?**  
n/a

**How To Reproduce (If applicable)**  
Steps to reproduce the behavior:  
start/end meeting, log output from getallheaders() in PHP 7

**Screenshots (If applicable)**  
n/a

**Additional context**  
let me know if there is anything else you need.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 8, 2020, 7:42am UTC](https://devforum.zoom.us/t/webhook-missing-authorization-header/11999/3 "2020-04-08T07:42:49Z")

</div>

Hey @dojohnso,

Please see this post about PHP Webhook Authorization header:

> [@Data Compliance API - Deauthorization Endpoint URL](https://devforum.zoom.us/t/data-compliance-api-deauthorization-endpoint-url/3870/15):
>
> Hey @john! You are correct, you will only receive the Deauthorization Event Notification Webhook with the Production version of your app. You can test this by installing the production version of your app via your apps publishable URL, [54%20PM] And then [uninstalling your app on your “Installed Apps” page.](https://marketplace.zoom.us/user/installed) I made a simple PHP web server and was able to see the Verification Token in the request headers (when testing a Zoom event/webhook sent to my server). Here is my code: Examp…

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![dojohnso](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/dojohnso/32/5414_2.png) [@dojohnso](https://devforum.zoom.us/u/dojohnso)\
**Post date:** [April 8, 2020, 2:57pm UTC](https://devforum.zoom.us/t/webhook-missing-authorization-header/11999/4 "2020-04-08T14:57:43Z")

</div>

Oh that’s very helpful. Thanks, @tommy!

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 9, 2020, 12:01am UTC](https://devforum.zoom.us/t/webhook-missing-authorization-header/11999/5 "2020-04-09T00:01:37Z")

</div>

You are welcome! 🙂

Let us know if you have additional questions!

-Tommy

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [June 7, 2021, 8:39pm UTC](https://devforum.zoom.us/t/webhook-missing-authorization-header/11999/7 "2021-06-07T20:39:55Z")

</div>