# Zoom JWT Token Creation - Automate the Process **URL:** \ **Category:** API and Webhooks\ **Created:** [May 14, 2020, 5:52pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708 "2020-05-14T17:52:20Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![gsura](https://avatars.discourse-cdn.com/v4/letter/g/e56c9b/32.png) [@gsura](https://devforum.zoom.us/u/gsura)\ **Post date:** [May 14, 2020, 5:52pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/1 "2020-05-14T17:52:20Z")
Hi, In the initial stages I have been creating JWT Token manually, which expires in a week. After our testing now I would like to automate the JWT Token creation process using a Http Rest call. I don’t see any documentation on how to automate the JWT Token creation process. Any pointers or link towards this topic will be helpful. Thank You for your time. ---
**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\ **Post date:** [May 19, 2020, 5:31am UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/2 "2020-05-19T05:31:46Z")
Hi @gsura, reference our documentation on [JWT Authorization](https://marketplace.zoom.us/docs/guides/auth/jwt). We recommend using one of [JWT.io’s recommend libraries](https://jwt.io/#libraries-io) to generate these tokens upon each request. In python, I use the [pyjwt](http://pyjwt.readthedocs.io/) library to generate a unique token each time a request is made. This token is sent as a Bearer Token in an authorization header of the request. I store the API Key & Secret in a `secrets.py` file. For example: ```python import jwt import requests import secrets import json from time import time # create a function to generate a token using the pyjwt library def generateToken(): token = jwt.encode( # Create a payload of the token containing API Key & expiration time {"iss": API_KEY, "exp": time() + 5000}, # Secret used to generate token signature API_SECRET, # Specify the hashing alg algorithm='HS256' # Convert token to utf-8 ).decode('utf-8') return token # send a request with headers including a token def getUsers(): headers = {'authorization': 'Bearer %s' % generateToken(), 'content-type': 'application/json'} r = requests.get('https://api.zoom.us/v2/users/', headers=headers) print(r.text) ``` In Node.js, you can use the [jsonwebtoken](https://www.npmjs.com/package/jsonwebtoken) package to create these tokens in similar ways. I use [dotenv](https://www.npmjs.com/package/dotenv) to store the API Key & Secret. ```auto require("dotenv").config(); const jwt = require("jsonwebtoken"); const fetch = require("node-fetch"); const generateToken = () => { // create a payload with the issuer and expiration time const payload = { iss: process.env.API_KEY, exp: new Date().getTime() + 5000, }; // sign the token using your API Secret const token = jwt.sign(payload, process.env.API_SECRET); return token; }; const getUsers = async () => { // send a request with a token in the authorization header let url = "https://api.zoom.us/v2/users"; let headers = { headers: { Authorization: `Bearer ${getToken()}` } }; try { const response = await fetch(url, headers); return json = await response.json(); } catch (error) { console.log(error); } }; ``` Let us know if there’s any guidance we can give! ---
**Author:** ![rahul.shinde](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@rahul.shinde](https://devforum.zoom.us/u/rahul.shinde)\ **Post date:** [May 19, 2020, 11:38am UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/3 "2020-05-19T11:38:58Z")
Hi @michael.zoom, can you please share java simple for above JWT Token creation? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [May 22, 2020, 4:42pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/4 "2020-05-22T16:42:11Z")
Hey @rahul.shinde, You can see Java examples and libraries for JWT creation here: [jwt.io](http://jwt.io) Thanks, Tommy ---
**Author:** ![gsura](https://avatars.discourse-cdn.com/v4/letter/g/e56c9b/32.png) [@gsura](https://devforum.zoom.us/u/gsura)\ **Post date:** [May 22, 2020, 4:56pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/5 "2020-05-22T16:56:07Z")
Thank You Tommy and Michael for your inputs. I do see the JWT creation using php, Java etc. I do not see any example or syntax using Curl or Http Call etc. Any pointers on this will be helpful. - Also do i need to use a JWT token to create another JWT token automatically ? Thank You for your time and inputs. -Cheers Gautham ---
**Author:** ![rahul.shinde](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@rahul.shinde](https://devforum.zoom.us/u/rahul.shinde)\ **Post date:** [May 27, 2020, 3:11pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/6 "2020-05-27T15:11:46Z")
Thanks, @tommy. we are working on this. but I have one issue regarding JWT token generating using java. Do you have any idea regarding this? **Java Code** import io.jsonwebtoken.JwtBuilder; import io.jsonwebtoken.Jwts; import io.jsonwebtoken.SignatureAlgorithm; ```auto import java.util.Date; import java.util.UUID; @SuppressWarnings("deprecation") public String createJWTToken() { String id = UUID.randomUUID().toString().replace("-", ""); //The JWT signature algorithm we will be using to sign the token final SignatureAlgorithm signatureAlgorithm = SignatureAlgorithm.HS256; long nowMillis = System.currentTimeMillis(); Date now = new Date(nowMillis); //We will sign our JWT with our ApiKey secret //Let's set the JWT Claims JwtBuilder builder = null; try { builder = Jwts.builder().setId(id).setHeaderParam("typ", "JWT") .setIssuedAt(now) .setSubject("") .setIssuer(API_KEY) .signWith(signatureAlgorithm, SECRET_KEY.getBytes("UTF-8")); //if it has been specified, let's add the expiration if (ttlMillis >= 0) { long expMillis = nowMillis + ttlMillis; Date exp = new Date(expMillis); builder.setExpiration(exp); } } catch (Exception e) { e.printStackTrace(); } return builder.compact();//Builds the JWT and serializes it to a compact, URL-safe string } ``` **Below is the exception for JWT token creation** ```auto javax.servlet.ServletException: Servlet execution threw an exception at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:328) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at com.test.lms.servlets.GlobalFilter.doFilter(GlobalFilter.java:204) at com.test.lms.servlets.GlobalFilter.doFilter(GlobalFilter.java:48) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at com.general.FilterDemo.doFilter(FilterDemo.java:312) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:224) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98) at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:200) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:579) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:307) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) Caused by: java.lang.NoClassDefFoundError: io/jsonwebtoken/Jwts at com.zoom.JWTTokenGeneration.createJWTToken(JWTTokenGeneration.java:31) at com.zoom.Utilities.setMeeting(Utilities.java:571) at com.general.InsertController.doPost(InsertController.java:377) at javax.servlet.http.HttpServlet.service(HttpServlet.java:641) at javax.servlet.http.HttpServlet.service(HttpServlet.java:722) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305) ... 22 more Caused by: java.lang.ClassNotFoundException: io.jsonwebtoken.Jwts at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1701) at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1546) ... 28 more ``` ---
**Author:** ![rahul.shinde](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@rahul.shinde](https://devforum.zoom.us/u/rahul.shinde)\ **Post date:** [May 28, 2020, 6:54am UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/7 "2020-05-28T06:54:48Z")
@tommy : The jar present on a different path on my machine and now jar is placed in classes/lib folder. works perfectly. Once again thanks for the help 🙂 ---
**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\ **Post date:** [June 1, 2020, 10:27pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/8 "2020-06-01T22:27:37Z")
Hi @gsura I don’t know a method to generate these tokens natively in cURL. I would use one of these libraries to generate the tokens which can be accessed by a cURL request. > **[JWT.IO](https://jwt.io/)** > > JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties. ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 9:39pm UTC](https://devforum.zoom.us/t/zoom-jwt-token-creation-automate-the-process/17708/9 "2020-08-21T21:39:37Z")
Closed on August 21, 2020, 9:39pm UTC