Backend Automation S2s OAuth

Cron Job / Backend Service
       ↓
   Token Cache (Redis)
       ↓
   Zoom APIs (account-wide access)

const redis = require('redis');
const client = redis.createClient();

async function getZoomToken() {
  // Check cache first
  let token = await client.get('zoom_s2s_token');
  
  if (!token) {
    // Request new token
    const response = await axios.post(
      'https://zoom.us/oauth/token',
      'grant_type=account_credentials&account_id=' + ACCOUNT_ID,
      {
        headers: {
          'Authorization': 'Basic ' + Buffer.from(`${CLIENT_ID}:${CLIENT_SECRET}`).toString('base64')
        }
      }
    );
    
    token = response.data.access_token;
    
    // Cache with TTL (10 second buffer before actual expiration)
    await client.setex('zoom_s2s_token', response.data.expires_in - 10, token);
  }
  
  return token;
}

// Daily cron job to sync users
cron.schedule('0 0 * * *', async () => {
  const token = await getZoomToken();
  
  const newUsers = await getNewUsersFromHR();
  
  for (const user of newUsers) {
    await axios.post(
      'https://api.zoom.us/v2/users',
      {
        action: 'create',
        user_info: {
          email: user.email,
          type: 1,
          first_name: user.firstName,
          last_name: user.lastName
        }
      },
      {
        headers: { Authorization: `Bearer ${token}` }
      }
    );
  }
});

// Generate weekly meeting reports
async function generateWeeklyReport() {
  const token = await getZoomToken();
  
  const response = await axios.get(
    'https://api.zoom.us/v2/report/users',
    {
      params: {
        from: startOfWeek(),
        to: endOfWeek()
      },
      headers: { Authorization: `Bearer ${token}` }
    }
  );
  
  return response.data.users;
}

# docker-compose.yml
version: '3.8'
services:
  redis:
    image: redis:7-alpine
    
  automation-service:
    build: .
    environment:
      - ZOOM_ACCOUNT_ID=${ZOOM_ACCOUNT_ID}
      - ZOOM_CLIENT_ID=${ZOOM_CLIENT_ID}
      - ZOOM_CLIENT_SECRET=${ZOOM_CLIENT_SECRET}
      - REDIS_URL=redis://redis:6379
    depends_on:
      - redis

try {
  const token = await getZoomToken();
} catch (error) {
  if (error.response?.data?.error === 'invalid_client') {
    // Invalid credentials
    logger.error('Invalid Zoom credentials');
    alertOps('Zoom integration broken - check credentials');
  }
}

// Implement retry logic for rate limits
const retryRequest = async (fn, retries = 3) => {
  for (let i = 0; i < retries; i++) {
    try {
      return await fn();
    } catch (error) {
      if (error.response?.status === 429) {
        // Rate limited - wait and retry
        await sleep(Math.pow(2, i) * 1000);
        continue;
      }
      throw error;
    }
  }
};

// Test S2S token acquisition
describe('S2S OAuth', () => {
  it('should get valid access token', async () => {
    const token = await getZoomToken();
    expect(token).toMatch(/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/);
  });
  
  it('should cache token in Redis', async () => {
    await getZoomToken();
    const cached = await client.get('zoom_s2s_token');
    expect(cached).toBeTruthy();
  });
});