# Zoom webhook validation event missing app's clientid header **URL:** \ **Category:** Meetings\ **Tags:** webhooks\ **Created:** [February 6, 2023, 4:28am UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619 "2023-02-06T04:28:45Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![rsahu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rsahu/32/45205_2.png) [@rsahu](https://devforum.zoom.us/u/rsahu)\ **Post date:** [February 6, 2023, 4:28am UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/1 "2023-02-06T04:28:45Z")
We are implementing webhook validation as documented here [https://marketplace.zoom.us/docs/api-reference/webhook-reference/#validate-your-webhook-endpoint](https://marketplace.zoom.us/docs/api-reference/webhook-reference/#validate-your-webhook-endpoint), the but validation event request does not contain the app’s clientid header like actual webook event request. We use the clientid in the header to identify correct the Secret Token. This is needed because we support customer created apps in their zoom organization. Webhook event request header - [https://marketplace.zoom.us/docs/api-reference/webhook-reference/#request-headers](https://marketplace.zoom.us/docs/api-reference/webhook-reference/#request-headers) ---
**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\ **Post date:** [February 6, 2023, 9:40pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/2 "2023-02-06T21:40:41Z")
Hi @rsahu Thanks for reaching out to the Zoom Developer Forum and welcome to our community, I am happy to help here! I believe this is the expected behavior, once you validate your endpoint, all the events will include the client ID in the headers ---
**Author:** ![rsahu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rsahu/32/45205_2.png) [@rsahu](https://devforum.zoom.us/u/rsahu)\ **Post date:** [February 8, 2023, 6:18am UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/3 "2023-02-08T06:18:38Z")
Hi @elisa.zoom , I am trying to find a way to handle multiple zoom apps webhook validation request. How to differentiate webhook validation request to select correct secret token from databse. ---
**Author:** ![rsahu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rsahu/32/45205_2.png) [@rsahu](https://devforum.zoom.us/u/rsahu)\ **Post date:** [February 9, 2023, 12:46pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/4 "2023-02-09T12:46:50Z")
Hi @elisa.zoom , Do you have any update. ---
**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\ **Post date:** [February 9, 2023, 8:41pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/5 "2023-02-09T20:41:25Z")
Hi @rsahu I see. If I understand this correctly, you would have to set up independent validations for your apps Here is a link to our sample app that demonstrates how to implement the URL validation: > **[GitHub - zoom/webhook-sample-node.js: Receive Zoom Webhooks](https://github.com/zoom/webhook-sample-node.js)** > > Receive Zoom Webhooks. Contribute to zoom/webhook-sample-node.js development by creating an account on GitHub. Hope this helps, Elisa ---
**Author:** ![berk](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/berk/32/14353_2.png) [@berk](https://devforum.zoom.us/u/berk)\ **Post date:** [February 11, 2023, 7:59pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/6 "2023-02-11T19:59:08Z")
I don’t think this is what he’s asking, and we have the same issue… We have two apps on the Zoom marketplace that have the same functionality using the same webhook endpoints, except one is an account level app and the other is a user level app. We need the client id to be passed to determine which secret token we should use in validating the webhook endpoint. While the documentation says that clientid will be present in the request header, it isn’t in validation calls. This is a bug that needs to be fixed. ---
**Author:** ![berk](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/berk/32/14353_2.png) [@berk](https://devforum.zoom.us/u/berk)\ **Post date:** [February 11, 2023, 8:06pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/7 "2023-02-11T20:06:37Z")
@rsahu Our workaround at the moment is to rely on the verification code passed in the Authorization header. This is not ideal, as verification codes will be deprecated in October 2023, but this is currently the ONLY way one can identify which app is requesting the validation. This should be a simple fix for Zoom to implement honestly, so would definitely appreciate if @elisa.zoom could bring visibility to the issue. Thanks! ---
**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\ **Post date:** [February 13, 2023, 9:28pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/8 "2023-02-13T21:28:58Z")
Thank you for chiming in here @berk I will pass this feedback along with my team and will come back with updates ---
**Author:** ![jafarmlp](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jafarmlp/32/61482_2.png) [@jafarmlp](https://devforum.zoom.us/u/jafarmlp)\ **Post date:** [July 14, 2024, 1:02pm UTC](https://devforum.zoom.us/t/zoom-webhook-validation-event-missing-apps-clientid-header/82619/9 "2024-07-14T13:02:48Z")
Is there any update on this topic ?. I have the same issue