zoom /setup-zoom-oauth
Use this skill when auth is the blocker or when auth choices will shape the entire integration.
Scope
- App type selection
- OAuth grant selection
- Scope planning
- Token exchange and refresh
- Auth debugging and environment assumptions
Workflow
- Determine the app model and who is authorizing whom.
- Create or validate the Marketplace app and manifest through setup-zoom-marketplace-app.
- Choose the correct grant flow.
- Identify minimum scopes for the user flow.
- Define token storage and refresh behavior.
- Route into the deepest relevant reference docs only after the above is clear.
Primary References
Common Mistakes
- Picking a grant before clarifying the actor and tenant model
- Asking for broad scopes before confirming the exact workflow
- Forgetting refresh-token behavior and token lifecycle handling
- Reusing an old refresh token after a successful refresh instead of storing the newly returned one
- Treating auth failures as API failures without checking app configuration first