# Zoom iOS Client SDK Authentication Best Practices

**URL:** <https://devforum.zoom.us/t/zoom-ios-client-sdk-authentication-best-practices/45588>\
**Category:** iOS\
**Created:** [March 12, 2021, 7:51pm UTC](https://devforum.zoom.us/t/zoom-ios-client-sdk-authentication-best-practices/45588 "2021-03-12T19:51:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chrisnocd](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/chrisnocd/32/17742_2.png) [@chrisnocd](https://devforum.zoom.us/u/chrisnocd)\
**Post date:** [March 12, 2021, 7:51pm UTC](https://devforum.zoom.us/t/zoom-ios-client-sdk-authentication-best-practices/45588/1 "2021-03-12T19:51:11Z")

</div>

**Description**  
If authenticating with a JWT token that has an expiration time, what happens if the token expires? Does Zoom SDK functionality like join meetings cease to work?

What are best practices to handle expiring JWT tokens?

If SDK is initialized with JWT token that expires, is it possible to re-initialize the Zoom SDK multiple times with different jwt tokens each time? Would it be best practice to just initialize the Zoom SDK with a fresh jwt token before joining every meeting? This JWT token would be generated from the backend and sent via endpoint, and the client would hit the endpoint everytime before joining a meeting.

**Which Client iOS SDK version?**  
zoom-sdk-ios-5.4.54802.0124

---

<div class="post-metadata">

**Author:** ![Michael\_Condon](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_condon/32/13543_2.png) [@Michael\_Condon](https://devforum.zoom.us/u/Michael_Condon)\
**Post date:** [March 13, 2021, 12:51am UTC](https://devforum.zoom.us/t/zoom-ios-client-sdk-authentication-best-practices/45588/2 "2021-03-13T00:51:14Z")

</div>

Hey @chrisnocd,

Thanks for using the dev forum!

I dont believe the SDK will actually kick a participant out of the meeting if the JWT expired after authing the SDK. The SDK should behave as authed until its lifecycle has ended. It is encouraged to create a new JWT before every SDKAuth for security purposes. However, as long as the JWT has not expired it can be used to auth the SDK multiple times.

Thanks!  
Michael

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [April 12, 2021, 10:51am UTC](https://devforum.zoom.us/t/zoom-ios-client-sdk-authentication-best-practices/45588/3 "2021-04-12T10:51:51Z")

</div>

Closed on April 12, 2021, 10:51am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.