Common Issues

Fix:

• Verify signatures using the exact raw request body bytes (capture raw body before JSON parsing).
• Validate both x-zm-signature and x-zm-request-timestamp and reject stale timestamps (replay protection).

See: verification.md

Timeouts / Retries / Duplicate Events

Symptom: Zoom retries delivery, you process the same event multiple times.

Fix:

• Respond fast (acknowledge ASAP, then enqueue work).
• Make handlers idempotent (dedupe by event ID/timestamp + payload identifiers).

URL Validation Fails

Symptom: You can’t enable the webhook endpoint in Marketplace; validation fails.

Fix:

• Implement endpoint.url_validation response correctly (plainToken + encryptedToken).

See: verification.md