| description | Isolate and fix Zoom authentication failures across OAuth, SDK signatures, and token refresh paths. |
|---|
Use this command when a Zoom login flow, token exchange, or signature flow is failing and you need a concrete failure diagnosis.
- Capture the exact failing symptom: error text, failing endpoint, affected surface, and whether the failure happens at authorize, callback, token exchange, refresh, or SDK join time.
- Inspect the repository for the auth implementation, env var usage, callback handling, and token lifecycle code.
- Identify the auth model in use: user-level OAuth, server-to-server or service auth where applicable, or SDK signature and token flows.
- Confirm the presence of required config values without printing secrets.
- If the issue report lacks the concrete error, ask for it before making speculative auth changes.
Before changing anything:
- name the most likely failing layer
- list the evidence that will be checked
- list the files and commands involved
- state whether the workflow is read-only diagnosis or fix plus verification
- Inspect env and source usage for mismatched client IDs, redirect URIs, scope lists, token endpoints, or signature inputs.
- For OAuth failures, verify exact redirect URI matching, token exchange parameters, and refresh-token rotation behavior.
- For SDK auth failures, verify the expected server-side signature or token generation path for the specific SDK.
- If the failure is caused by client capability mismatch, say that directly instead of pretending it is a token bug.
- Apply only the minimum correction required to fix the identified layer.
- Re-run the failing path or reconstruct the exact auth request shape.
- Confirm the corrected file, env var name, redirect URI, or server URL now matches the intended configuration.
- If the failure persists, tighten the diagnosis to the next concrete layer rather than broadening scope.
- State whether the issue is fixed, partially fixed, or blocked by missing credentials or external platform behavior.
## Result
- Action: diagnosed or fixed a Zoom auth failure
- Status: success | partial | failed
- Details: failing layer, evidence checked, fix applied, remaining blocker
- Re-run the failing flow with the corrected auth path.
- If the issue is webhook-related after auth succeeds, run
/debug-zoom-webhook.