Agent Skills
› openai/plugins
› zoom-oauth
zoom-oauth
GitHub提供Zoom OAuth的具体实现与故障排查指南。涵盖识别应用类型、选择授权流程、安全存储刷新令牌及验证请求等关键步骤，辅助完成认证集成。
Trigger Scenarios
需要实现Zoom OAuth认证
排查Zoom Token或授权相关问题
Install
npx skills add openai/plugins --skill zoom-oauth -g -y
SKILL.md
Frontmatter
{
"name": "zoom-oauth",
"description": "Use when implementing OAuth."
}
Zoom OAuth
Use this skill for concrete Zoom authentication implementation and troubleshooting. Prefer setup-zoom-oauth for the first-pass setup plan, then return here for exact flows, scope behavior, refresh handling, and error diagnosis.
Workflow
- Identify the app type and actor: user-level OAuth, account-level OAuth, server-to-server OAuth where officially supported, SDK JWT, or Build-platform credentials.
- Confirm the target API, SDK, or app surface, because scopes and token audiences differ by surface.
- Choose the grant flow: authorization code with PKCE for public clients, authorization code for confidential web apps, device authorization where appropriate, or account credentials for supported account-level automation.
- Store refresh tokens as single-use values: persist the replacement refresh token returned by each refresh response before reusing the old one.
- Validate requests against redirect URI, account ID, scopes, app publication state, and token expiration before changing application code.
- For local development, keep access tokens out of logs and treat refresh tokens as single-use when rotating credentials.
References
- Full preserved guide: references/full-guide.md
- OAuth flows: concepts/oauth-flows.md
- Token lifecycle: concepts/token-lifecycle.md
- Scope architecture: concepts/scopes-architecture.md
- Granular scopes: references/granular-scopes.md
- OAuth errors: references/oauth-errors.md
- Redirect URI issues: troubleshooting/redirect-uri-issues.md
Version History
- 11c74d6 Current 2026-07-19 09:54
