As the title says, this is a big bug on zooms part.
When users want to integrate their app with our system, we send them to the usually zoom url, with a state=123456
parameter attached.
State is supposed to be carried all the way until redirect back to our site, so that we can identify the user/session which initiated it from the start.
But if the user doesn’t have a zoom account and is asked to log in, it throws away this state parameter and when the user is redirected back to our app, we have no idea who they are and it all collapses.
Am I missing something?