/setup-zoom-oauth

Use this skill when auth is the blocker or when auth choices will shape the entire integration.

Scope

• App type selection

• OAuth grant selection

• Scope planning

• Token exchange and refresh

• Auth debugging and environment assumptions

Workflow

• Determine the app model and who is authorizing whom.

• Choose the correct grant flow.

• Identify minimum scopes for the user flow.

• Define token storage and refresh behavior.

• Route into the deepest relevant reference docs only after the above is clear.

Primary References

• oauth

• general

• rest-api

Common Mistakes

• Picking a grant before clarifying the actor and tenant model

• Asking for broad scopes before confirming the exact workflow

• Forgetting refresh-token behavior and token lifecycle handling

• Reusing an old refresh token after a successful refresh instead of storing the newly returned one

• Treating auth failures as API failures without checking app configuration first