Repository navigation
zoom: require Client Secret with Client ID (1.0.2) - #717
Merged
SamSokolin merged 1 commit intoOct 18, 2026
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Almost all Zoom sign-in failures we see are invalid_client from a blank Client Secret. The current form calls the secret optional, so people paste a regular Client ID and leave the secret empty.
This makes the copy lead with the Client Secret being required along with the Client ID, and keeps the Public Client ID as the no-secret option.
The marketplace listing picks this up on the next Reindex Repo for cursor/plugins.
Note
Low Risk
Documentation and plugin marketplace copy only; no runtime auth or MCP configuration changes.
Overview
Bumps the Zoom Cursor plugin to 1.0.2 and rewrites setup copy so admins stop pairing a confidential Client ID with an empty secret (which triggers Zoom
invalid_clientat token exchange).Plugin config UI (
plugin.json): retitles the credential fields to Zoom Client ID or Public Client ID and Zoom Client Secret (needed with the Client ID), and updates descriptions to state the secret is required with a regular Client ID while Public Client ID remains the PKCE/no-secret path.README reorders setup to present Client ID + Secret first, Public Client ID as the alternative, adds a note to re-enter the secret after Zoom regeneration, and tightens install/team wording around “credentials” instead of only client ID.
CHANGELOG documents the above; variable keys, required fields, and
mcp.jsonauth wiring are unchanged.Reviewed by Cursor Bugbot for commit 9c1de27. Bugbot is set up for automated code reviews on this repo. Configure here.