# WebSDK Signature

**URL:** <https://devforum.zoom.us/t/websdk-signature/85540>\
**Category:** Web\
**Created:** [March 28, 2023, 10:00pm UTC](https://devforum.zoom.us/t/websdk-signature/85540 "2023-03-28T22:00:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![nhendry](https://avatars.discourse-cdn.com/v4/letter/n/8e7dd6/32.png) [@nhendry](https://devforum.zoom.us/u/nhendry)\
**Post date:** [March 28, 2023, 10:00pm UTC](https://devforum.zoom.us/t/websdk-signature/85540/1 "2023-03-28T22:00:58Z")

</div>

**Description**  
We are having issues with ONE user not being able to access our webinars from our site due to the error “invalid signature” . It has happened with multiple webinars and other users have had no issue attending these webinars and only is effecting this single user. We are unable to replicate this issue and are wondering if anyone has experienced this?

**Browser Console Error**  
The full error message or issue you are running into.

**Which Web Meeting SDK version?**  
2.9.7 but also happened with earlier versions for this specific user

**To Reproduce(If applicable)**  
Steps to reproduce the behavior:  
We cannot reproduce it because we are able to view the webinar without issue

**Device (please complete the following information):**

- Device: PC
- Browser: Chrome

---

<div class="post-metadata">

**Author:** ![j.schoenemeyer](https://avatars.discourse-cdn.com/v4/letter/j/f9ae1b/32.png) [@j.schoenemeyer](https://devforum.zoom.us/u/j.schoenemeyer)\
**Post date:** [March 29, 2023, 5:32pm UTC](https://devforum.zoom.us/t/websdk-signature/85540/3 "2023-03-29T17:32:22Z")

</div>

are you creating the signature on your backend server or the client browser?

---

<div class="post-metadata">

**Author:** ![nhendry](https://avatars.discourse-cdn.com/v4/letter/n/8e7dd6/32.png) [@nhendry](https://devforum.zoom.us/u/nhendry)\
**Post date:** [March 30, 2023, 6:51pm UTC](https://devforum.zoom.us/t/websdk-signature/85540/4 "2023-03-30T18:51:05Z")

</div>

we are creating it on the client browser

---

<div class="post-metadata">

**Author:** ![j.schoenemeyer](https://avatars.discourse-cdn.com/v4/letter/j/f9ae1b/32.png) [@j.schoenemeyer](https://devforum.zoom.us/u/j.schoenemeyer)\
**Post date:** [March 31, 2023, 5:05am UTC](https://devforum.zoom.us/t/websdk-signature/85540/5 "2023-03-31T05:05:31Z")

</div>

generating the signature on the client browser is not a good idea

- if the time on the client computer is not correctly synchronized, the signature will not work
- your Client Secret / SDK Secret is not secret - it’s easy to get your secret out of the javascript code

if you still want to use the client to generate the signature, you could change the times ( **iat** , exp, tokenExp) for the validity

---

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [April 4, 2023, 6:34am UTC](https://devforum.zoom.us/t/websdk-signature/85540/6 "2023-04-04T06:34:27Z")

</div>

@nhendry,

@j.schoenemeyer is correct, you should not create the signature on the client browser. Instead, it should be generated on the backend. Here is a helpful developer forum post that you can refer to for troubleshooting SDK JWT:

> [@Troubleshooting Meeting SDK signature validation](https://devforum.zoom.us/t/troubleshooting-meeting-sdk-signature-validation/85961):
>
> In this guide, we’ll cover common issues you may run into when generating a signature for the Zoom Meeting SDK. The Zoom Meeting SDK uses a JSON Web Token (JWT) signature to authorize the SDK and validate your client’s requests to start or join a meeting. Documentation on this is available here: [Meeting SDK Authorization](https://developers.zoom.us/docs/meeting-sdk/auth/). We also have a sample signature application which can be used as a good starting point: [Sample Meeting SDK Signature App - Node JS](https://github.com/zoom/meetingsdk-sample-signature-node.js) If the signature provided is invalid, the…

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [May 4, 2023, 4:34pm UTC](https://devforum.zoom.us/t/websdk-signature/85540/7 "2023-05-04T16:34:43Z")

</div>

Closed on May 4, 2023, 4:34pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.