Setting the file. One moment.
Skill 155 · Setup Zoom Webhooks
Subchapter 155.6
RUNBOOK.mdMarkdown3 KBView on GitHub
Use this before deep debugging. It catches common webhook failures quickly.
SKILL.md.SKILL.md is also a navigation convention for larger skill docs.x-zm-signature with raw request body.x-zm-request-timestamp and reject stale timestamps.payload = "v0:" + x-zm-request-timestamp + ":" + raw_body
expected = "v0=" + HMAC_SHA256(webhook_secret, payload)If raw_body differs from original bytes (pretty print/re-stringify), verification fails.
endpoint.url_validation challenge correctly.plainToken and computed encryptedToken when required.On event = endpoint.url_validation, hash payload.plainToken with your webhook secret and return both values exactly.
# 1) Reachability check (replace with your webhook route)
curl -sS -i "https://your-domain.example/webhook"
# 2) Check service logs quickly while sending test events
# (replace command with your runtime: pm2/docker/systemd)
pm2 logs your-service --lines 100
# 3) Basic endpoint health check if available
curl -sS -i "https://your-domain.example/health"Expected: endpoint is reachable over HTTPS, events appear once, and responses are consistently 2xx.