Zoom Create Meeting - suspected Bug


#1

I’m calling the 

https://api.zoom.us/v2/users/userA%40domain.com/meetings

{

“type”: 2,
“settings”: {
“host_video”: true,
“join_before_host”: true,
“participant_video”: true

}
}

to create a meeting and I get the start_url and join_url as response. 
When the start_url is shared with another person userB, and the userB clicks on the link. userB joins the meeting as host, but is shown as userA. 

I think this might be a bug, please let me know.


#2

Hi Mithun,

Who are you defining as the host of the meeting?  To me this sounds like expected behavior.  If you define a meeting with userA as the host, then the start_url will authenticate someone into the meeting as userA.   At least, that’s how we are using the API.


#3

Hmm…Interesting.
So if the meeting is created using UserA through api, and the start_url is used by someone else, still he/she will be shown as userA. 
One more thing, once the person has got UserA’s start_url, goes to browser, copy paste the url and starts the meeting, he/she can open a new tab and login to UserA’s account


#4

Hi Mithun, 

It’s not a bug, it’s by design. The start_url should never be shared with anyone except the host as it contains the host token information this being able to become the host and login using their account. You should only share the join_url. 

Thanks


#5

Oh…I get it now. 

Thanks a lot