Webhook was delayed and came with an invalid download token

[tommy (Tommy Gaessler)]

Hey @zoom-test,

There are a few more threads which mention the download_token was not working:

Update: Recording download url 403 error

Is this happening all over again??? Apparently getting 403 when downloading recordings in the last 18 hours or so!

Developer impacting changes during COVID-19

Has there been added authentication checks for downloading recorded lectures through download links that we get from API? Not able to download the recordings through those links after logging out from zoom.

Problem / AccessDenied on Downloading files from a WebHook event

Hey @tomkl, @Nicolai, We are aware of the issue and looking into if anything on the Zoom side affected this change. (ZOOM-146185) For now, the work around is to add your JWT Token to a query param to the download_url and not use the authorization bearer header: $access_token=JWT_TOKEN_HERE Thanks, Tommy

@zoom-test

So if webhooks were being delayed that much then that is something to look into that the token was generated, webhook sending got delayed, webhook sending finally happened, but the token was already expired because it was delayed for so long. At least that is my theory.

Good thoughts, but I’m pretty sure the token is generated once the webhook is sent.

That being said, we are working on a fix for this asap. I understand you can’t use the JWT since it is a marketplace app, I will update you once it is fixed.

@zoom-test

Again my question, what is the default expiration time for download_token’s from the webhooks? This is not documented anywhere. Right now it looks to be about a day long.

The token lasts for 24 hours.

Thanks,
Tommy