# Webhook validation change using secret token versus Chat Bot Event Notification Validation?

**URL:** <https://devforum.zoom.us/t/webhook-validation-change-using-secret-token-versus-chat-bot-event-notification-validation/91352>\
**Category:** API and Webhooks\
**Created:** [July 5, 2023, 1:11pm UTC](https://devforum.zoom.us/t/webhook-validation-change-using-secret-token-versus-chat-bot-event-notification-validation/91352 "2023-07-05T13:11:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gauraves](https://avatars.discourse-cdn.com/v4/letter/g/bc8723/32.png) [@gauraves](https://devforum.zoom.us/u/gauraves)\
**Post date:** [July 5, 2023, 1:11pm UTC](https://devforum.zoom.us/t/webhook-validation-change-using-secret-token-versus-chat-bot-event-notification-validation/91352/1 "2023-07-05T13:11:13Z")

</div>

### Before Creating a New Topic:

There is considerable talk of webhook validation changes, and the need to use the secret token instead of the verification token approach after Aug/Oct .

I am assuming this change also applies to messages sent to chat bots, since messages sent to chat bots are also event notifications, which are similar to webhook events, and the chatbot messages also currently rely on the verification token.

However there has been little discussion on how that will be impacted..

Our chatbot does not use web hooks, but it does need a way to validate the inbound messages from Zoom.

Also is the annotation by zoom next to the Secret token configuration in the chat bot creation wizard correct ? See screen shot eblow. It seems to imply the secret token will be sent with each message? That would seem to defeat the security purpose.

However, if Zoom does intend to send it with each message, in which header will the secret token be found? We currently can not spot it in incoming messages to our chat bot. (We do see the verification token in the Authorization header)

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/e/a/eaab394a4b34eccd2e4010731256c470b493682a.jpeg)

- Zoom Developer Changelog for Dev Product Changes: [https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/](https://marketplace.zoom.us/docs/guides/stay-up-to-date/changelog/)
- General Troubleshooting: [Support](https://devsupport.zoom.us/hc/en-us)
- To Submit a Ticket for Unexpected API/Zoom API Events Behavior: [Official Zoom Support | Help Center](https://support.zoom.us/hc/en-us)
- For General & Integrations Related Guidance: [https://community.zoom.com/](https://community.zoom.com/)
- For Troubleshooting Webhooks: [Guide: "We Are Not Receiving Webhooks As Expected" -- Here's What to Do! - #2](https://devforum.zoom.us/t/we-are-not-receiving-webhooks-as-expected-heres-what-to-do/64846/2)

* * *

### Format Your New Topic as Follows:

**API Endpoint(s) and/or Zoom API Event(s)**  
_Link the API endpoint(s) and/orZoom API Event(s) you’re working with to help give context._

**Description**  
_Details on your question, workflow or the problem you’re trying to solve._

**Error?**  
_The full error message or issue you are running into, where applicable._

**How To Reproduce**  
_Steps to reproduce the behavior:_  
_1. Request URL / Headers **(without credentials or sensitive info like emails, uuid, etc.)** / Body_  
_2. Authentication method or app type_  
_3. Any errors_

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [July 8, 2024, 4:47am UTC](https://devforum.zoom.us/t/webhook-validation-change-using-secret-token-versus-chat-bot-event-notification-validation/91352/2 "2024-07-08T04:47:48Z")

</div>

Closed on July 8, 2024, 4:47am UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.