使用System.Net.Http请求Zoom API OAuth Token被截断问题求助

问题现象 #

• 使用RestSharp调用Zoom OAuth接口时，能获取到632字符的有效access_token，可正常访问Zoom API
• 改用System.Net.Http实现后，获取到的access_token仅533字符，使用该令牌调用API时返回未授权错误

RestSharp 可正常运行的代码 #

using System;
using RestSharp;
namespace HelloWorldApplication {
  class HelloWorld {
    static void Main(string[] args) {
      var client = new RestClient("https://zoom.us/oauth/token?account_id=VfdA06Q9TQe31jH7oRutuQ&grant_type=account_credentials");
      client.Timeout = -1;
      var request = new RestRequest(Method.POST);
      request.AddHeader("Authorization", "Basic ####"); // 替换为你的Base64编码后的client_id:client_secret
      request.AddHeader("Cookie", "####");
      var body = @"";
      request.AddParameter("text/plain", body, ParameterType.RequestBody);
      IRestResponse response = client.Execute(request);
      Console.WriteLine(response.Content);
    }
  }
}

System.Net.Http 存在问题的代码 #

using System;
using System.Collections.Generic;
using System.Net.Http;
using Newtonsoft.Json;
using Newtonsoft.Json.Linq;

namespace ConsoleApp_Test_ZoomCreateMeeting
{
    class Program
    {
        static void Main(string[] args)
        {
            // Build the request body
            var authRequestBody = new FormUrlEncodedContent(new[]
            {
                new KeyValuePair<string, string>("grant_type", "client_credentials"),
                new KeyValuePair<string, string>("client_id", "####"), // 替换为你的client_id
                new KeyValuePair<string, string>("client_secret", "####") // 替换为你的client_secret
            });

            // Set up the HTTP client
            var authClient = new HttpClient();
            authClient.BaseAddress = new Uri("https://zoom.us/");

            // Send the request and get the response
            HttpResponseMessage authResponse = authClient.PostAsync("oauth/token", authRequestBody).Result;

            string responseContent = authResponse.Content.ReadAsStringAsync().Result;

            // Parse the JSON response
            JObject jsonResponse = JsonConvert.DeserializeObject<JObject>(responseContent);

            // Extract the access_token
            string currentToken = jsonResponse["access_token"].Value<string>();           

            Console.WriteLine("Current Token: " + currentToken);        
        }
    }
}

问题根源 #

两段代码的核心差异在于授权类型和请求方式不匹配：

• RestSharp使用的是Zoom的account_credentials授权流程：通过URL查询参数传递grant_type和account_id，并通过Authorization头传递Basic认证信息
• System.Net.Http代码误用了client_credentials授权类型，直接在请求体中传递client_id和client_secret，导致Zoom返回的是应用级短令牌，不具备账户级API访问权限，因此出现未授权错误

修复方案 #

按照Zoom的account_credentials授权规范调整System.Net.Http代码：

1. 将grant_type=account_credentials和account_id添加到请求URL的查询参数中
2. 构建Authorization: Basic <Base64编码的client_id:client_secret>请求头
3. 移除请求体中的所有参数，保持请求体为空
4. 无需显式设置Content-Type（空请求体默认符合要求）

修复后的System.Net.Http代码 #

using System;
using System.Net.Http;
using System.Net.Http.Headers;
using System.Text;
using Newtonsoft.Json;
using Newtonsoft.Json.Linq;

namespace ConsoleApp_Test_ZoomCreateMeeting
{
    class Program
    {
        static void Main(string[] args)
        {
            // 配置参数
            string clientId = "####"; // 替换为你的Zoom Client ID
            string clientSecret = "####"; // 替换为你的Zoom Client Secret
            string accountId = "VfdA06Q9TQe31jH7oRutuQ"; // 替换为你的Zoom账户ID

            // 构建Basic Auth头
            string authString = $"{clientId}:{clientSecret}";
            byte[] authBytes = Encoding.UTF8.GetBytes(authString);
            string authBase64 = Convert.ToBase64String(authBytes);

            // 初始化HttpClient
            using var authClient = new HttpClient();
            authClient.BaseAddress = new Uri("https://zoom.us/");
            authClient.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", authBase64);

            // 构建请求URL（包含查询参数）
            string requestUrl = $"oauth/token?grant_type=account_credentials&account_id={accountId}";

            // 发送POST请求（空请求体）
            HttpResponseMessage authResponse = authClient.PostAsync(requestUrl, null).Result;
            authResponse.EnsureSuccessStatusCode(); // 确保请求成功，否则抛出异常

            // 解析响应
            string responseContent = authResponse.Content.ReadAsStringAsync().Result;
            JObject jsonResponse = JsonConvert.DeserializeObject<JObject>(responseContent);
            string currentToken = jsonResponse["access_token"].Value<string>();

            Console.WriteLine("Current Token: " + currentToken);
            Console.WriteLine("Token Length: " + currentToken.Length); // 应显示632左右
        }
    }
}

验证要点 #

• 修复后获取的access_token长度应与RestSharp版本一致（约632字符）
• 调用Zoom API时，携带该令牌应能正常返回数据，不再出现未授权错误

内容的提问来源于stack exchange，提问作者Reggie Lopez