# Zoom OAuth 2.0 Proof Key for Code Exchange (PKCE) Flow

**URL:** <https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830>\
**Category:** API and Webhooks\
**Tags:** faq, oauth, pkce-flow, guide, pkce\
**Created:** [February 5, 2022, 1:22am UTC](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830 "2022-02-05T01:22:04Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\
**Post date:** [February 5, 2022, 1:52am UTC](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830/2 "2022-02-05T01:52:45Z")

</div>

# Zoom OAuth 2.0 PKCE Flow: In Postman

### Step 1: [Getting an Access Token](https://marketplace.zoom.us/docs/guides/auth/oauth/#getting-an-access-token)

A. Direct the user to `https://zoom.us/oauth/authorize` with the following query parameters:

 ![Screen Shot 2022-02-05 at 12.06.16 AM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/7/d/7d6b8924b0f73b089819cb19cef0e189e95e8a15.png)

### Postman Authorization Tab Configuration:

1. Under the **Authorization** tab of any request, select `OAuth 2.0`.Select **Get New Access Token**.

2. From there, select a **Grant Type** of **Authorization Code (With PKCE)**, and click **Authorize using the browser** checkbox.

3. In the **Auth URL** field, enter **Zoom Authorization** endpoint with **response\_type** and **code\_challenge** params values included:

4. In the **Access Token URL** field, enter the access token endpoint

5. In the **clientID** field, enter Zoom Marketplace OAuth app **clientID**.

6. In the **Code Challenge Method** field, select **SHA-256** and click **Get New Access token.**

7. Postman will open a browser tab that redirects to the endpoint entered for the [Zoom Marketplace redirect URL](https://marketplace.zoom.us/docs/guides/build/oauth-app#oauth-allow-list). Appended to the end of the Redirect URL, you will find the Authorization Code, which must be returned to the OAuth provider (Zoom) to get **Access Token**. This example leverages Postman’s redirect endpoint ([https://oauth.pstmn.io/v1/callback](https://oauth.pstmn.io/v1/callback)):

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/4/3/43408b6a65cee213b7e542f1b6109ee42495b45e.png)

### Postman Authorization Tab:

Here is a screenshot of what the populated **Authorization tab** looks like:

 ![Screen Shot 2022-02-04 at 8.31.27 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/8/b/8bfcc2e1ec53b89e6b74e7494e27a5bb4b61b238.png)

### Step 2: [Request Access Token](https://marketplace.zoom.us/docs/guides/auth/oauth#step-2-request-access-token):

A. Create Post to [https://zoom.us/oauth/token](https://zoom.us/oauth/token) with the following headers and query parameters:

 ![Screen Shot 2022-02-04 at 9.06.59 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/d/f/df99977414d759d2a4857189bb878d30d7477dd7.png)

### Postman Params Tab Configuration :

1. On the Postman **Params Tab** , set **code** , **grant\_type** , **redirect\_url** , and **code\_verifer** param values:

 ![Get Access Token Post Request](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/5/b/5b32a3f7a83586410672d4e3deef282ccacd4b5f.png)

1. On the Postman **Headers Tab** , set **Content-Type** and **Authorization** headers, then click Send:

 ![Screen Shot 2022-02-04 at 9.10.27 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/7/0/70cd9feef2f53e1430919988512de4863ddca219.png)

For reference, here is a video demonstrating the PKCE Flow:

(Coming Soon)

---

_[View the full topic](https://devforum.zoom.us/t/zoom-oauth-2-0-proof-key-for-code-exchange-pkce-flow/63830)._