# Zoom OAUTH vs JWT **URL:** \ **Category:** Authentication\ **Created:** [May 13, 2022, 4:55am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908 "2022-05-13T04:55:28Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![puneeth.ranganath](https://avatars.discourse-cdn.com/v4/letter/p/ecccb3/32.png) [@puneeth.ranganath](https://devforum.zoom.us/u/puneeth.ranganath)\ **Post date:** [May 13, 2022, 4:55am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/1 "2022-05-13T04:55:28Z")
I have a question about a use case. The goal is for us to access zoom api and fetch meetings, recordings etc from our customer’s Zoom account and use the data for developing some insights. I have the below questions. 1. Should we be asking our clients to share their JWT credentials/token and then use it for the api calls? Or should this process be via an OAUTH app? What is the recommended approach? 2. If the answer to point 1 is JWT then will all the api end points work with the JWT token? ---
**Author:** ![puneeth.ranganath](https://avatars.discourse-cdn.com/v4/letter/p/ecccb3/32.png) [@puneeth.ranganath](https://devforum.zoom.us/u/puneeth.ranganath)\ **Post date:** [May 16, 2022, 5:22am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/2 "2022-05-16T05:22:07Z")
Also I have a doubt regarding the api rate limits. Irrespective of whether I use JWT/OAUTH the rate limits applied will be to my customer accounts right? Or is their any limit applied to our service which calls the api? ---
**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\ **Post date:** [May 16, 2022, 10:25pm UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/3 "2022-05-16T22:25:48Z")
Hi @puneeth.ranganath Hope you are doing great! I am happy to help here! You should NOT be asking your clients to share the JWT credentials with you to make api calls. Instead, you should create an OAuth app (user level or account level, depending your needs) and each user will authorize your app on their side. Find a link to our docs here: > **[End User Authorization Flows](https://marketplace.zoom.us/docs/guides/using-apps/end-users/)** > > The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform. Regarding the second question about API reate limits, yes you are right, those limites will apply to the customer/user who authorizes the app Hope this helps, Elisa ---
**Author:** ![puneeth.ranganath](https://avatars.discourse-cdn.com/v4/letter/p/ecccb3/32.png) [@puneeth.ranganath](https://devforum.zoom.us/u/puneeth.ranganath)\ **Post date:** [May 17, 2022, 5:23am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/4 "2022-05-17T05:23:40Z")
@elisa.zoom Thanks for the response. I will check the above document and try creating OAUTH app. ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [June 4, 2022, 1:54am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/5 "2022-06-04T01:54:58Z")
Glad Elisa was about to provide a path forward. Please let us know if you have any additional questions, @puneeth.ranganath! ---
**Author:** ![puneeth.ranganath](https://avatars.discourse-cdn.com/v4/letter/p/ecccb3/32.png) [@puneeth.ranganath](https://devforum.zoom.us/u/puneeth.ranganath)\ **Post date:** [June 27, 2022, 7:43am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/6 "2022-06-27T07:43:02Z")
@donte.zoom Had another question will the “Client ID” and “Client Secret” in a OAUTH app ever change or it is always the same? I know we can regenerate the secret but unless we do that these wont change right? ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [June 27, 2022, 4:04pm UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/7 "2022-06-27T16:04:45Z")
Correct, @puneeth.ranganath! You can regenerate the secret of an OAuth app, but the Client ID will be the same. ---
**Author:** ![puneeth.ranganath](https://avatars.discourse-cdn.com/v4/letter/p/ecccb3/32.png) [@puneeth.ranganath](https://devforum.zoom.us/u/puneeth.ranganath)\ **Post date:** [June 28, 2022, 7:18am UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/8 "2022-06-28T07:18:20Z")
thank you @donte.zoom ---
**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\ **Post date:** [June 28, 2022, 2:05pm UTC](https://devforum.zoom.us/t/zoom-oauth-vs-jwt/68908/9 "2022-06-28T14:05:53Z")
Thanks for chiming in @donte.zoom🙂