Announcement updated October 03, 2022
Zoom made changes to webhook validation and verification.
Webhook validation
Webhook endpoints require initial manual validation before Zoom will send events to them. Endpoints will also be validated every 72-hours using a challenge-response check.
Webhook validation will be required for all new webhooks created after Oct 23, 2022. Webhooks created prior to this date will not require validation unless you make changes to them.
Webhook validation will be required for all new and existing webhooks as of October 2023.
See Validate your webhook endpoint for details.
Webhook verification
The Webhook verification token is deprecated. It will be sunset as of October 2023.
There is a new way to verify that webhook events are sent by Zoom using a new secret token and x-zm-signature header. We recommend that you replace your existing webhook verification logic with this new logic, described in Verify webhook endpoints.