kyleboe / zoom_rb

Ruby REST API Wrapper for zoom.us API
https://developers.zoom.us/docs/api/
MIT License
83 stars 104 forks source link

OAuth Security Updates: Support PKCE for authorization_code grant_type #402

Closed gerryster closed 2 years ago

gerryster commented 2 years ago

Zoom has announced some security improvements to their API. On May 15th, 2022, their API will require PKCE for authorization_code grant_type. In order to support PKCE, this gem needs to permit the "code_verifier" parameter as part of requesting and OAuth token. Specifically here: https://github.com/hintmedia/zoom_rb/blob/6eb9d6a94aa14f0ad605fe15c29f0ac8f8343989/lib/zoom/clients/oauth.rb#L16

See also "Using Proof Key for Code Exchange (PKCE)" in https://marketplace.zoom.us/docs/guides/auth/oauth for additional information on PKCE.