Source type

Zoom Source Configuration

Zoom sources receive Zoom webhook events, verify x-zm-signature, and answer endpoint.url_validation challenge payloads.

ZOOMPOST, PUT, PATCH, DELETESecret TokenCommunication

Zoom webhooks documentation All source types

Zoom configuration

Create a Zoom source, keep POST and PUT and PATCH and DELETE enabled, and provide the configured Secret Token values for provider signature. FastHook uses these settings to validate each Zoom delivery before it enters the routing workflow.

Source Type

ZOOM

Allowed methods

POST, PUT, PATCH, DELETE

Authentication

Provider signature

Credential fields

Secret Token

Zoom source config

{
  "type": "ZOOM",
  "config": {
    "auth_type": "PROVIDER_SIGNATURE",
    "auth": {
      "provider": "ZOOM",
      "webhook_signing_secret": "provider-secret"
    },
    "allowed_http_methods": ["POST","PUT","PATCH","DELETE"]
  }
}

Endpoint URL validation before events

Zoom sends an endpoint.url_validation payload to the Source URL.
FastHook signs Zoom's plainToken with the configured secret token and returns the encryptedToken response.
After validation succeeds, Zoom sends normal signed event payloads.

Zoom request contract

FastHook verifies x-zm-signature over v0:timestamp:raw-body and returns encryptedToken for Zoom endpoint.url_validation payloads.

POSTPUTPATCHDELETE

Special response: For endpoint.url_validation, FastHook returns JSON with plainToken and encryptedToken.

Zoom headers

Preserve x-zm-signature, x-zm-request-timestamp when sending Zoom test deliveries. FastHook evaluates this request context before accepting the payload, so missing or modified values remain visible as rejected requests instead of routed events.

x-zm-signature

v0 HMAC-SHA256 signature.

x-zm-request-timestamp

Unix timestamp used in the signature input.

Zoom setup

Configure the Zoom event notification endpoint URL with the FastHook Source URL.
Copy the Zoom webhook secret token into FastHook.
Run Zoom endpoint validation after saving the source.