UNITIX Soft CRM Zoom Scope Update — Reviewer Test Plan

1. Test Environment and Login

Application URL: https://crm.unitix.pro/
Login URL: https://crm.unitix.pro/
OAuth environment: Zoom Marketplace Development
Development callback: https://crm.unitix.pro/api/zoom/callback
CRM account: Use the dedicated UNITIX Soft CRM Zoom reviewer account supplied privately in the Marketplace review credentials.
Password: Use the password supplied privately in the Marketplace review credentials.

The reviewer credentials are not published here. This page does not contain a password, Client Secret, OAuth token, host start URL, or ZAK token.

Open the Login URL.
Choose Login, not Registration.
Enter the privately supplied reviewer email and password.
Confirm that Bookings and Booking Settings are available.

2. Confirm Development OAuth

The dedicated reviewer CRM account is allow-listed server-side for Development OAuth. All ordinary CRM users continue to use the published Production Zoom application. The reviewer account stores its Development authorization under a separate connection and cannot overwrite an existing Production Zoom connection.

Open Bookings → Settings.
Locate the Zoom integration card.
Confirm that it says Development review mode or Connected · Development review.
Select Connect.
On the Zoom authorization page, inspect the browser URL and confirm that its client_id matches the Development Client ID shown in the Zoom Marketplace Development credentials.
Confirm that the redirect URI is the Development callback shown above.

Expected Result

The authorization request uses the Zoom Development Client ID. A Production Client ID is never selected for the dedicated reviewer flow.

3. Zoom OAuth Scopes

The Development app requests four user-level scopes. UNITIX Soft CRM acts only for the Zoom user who authorizes the app and does not receive permission to manage meetings owned by other Zoom users.

Scope	Purpose	Reviewer verification
`meeting:write:meeting`	Create a Zoom meeting owned by the authorized user.	Create the test booking and confirm that one Zoom meeting and join link are created.
`meeting:update:meeting`	Update the authorized user's meeting when its booking time or details change.	Reschedule the booking and confirm that the existing Zoom meeting changes without creating a second meeting.
`meeting:delete:meeting`	Delete the authorized user's corresponding Zoom meeting when the booking is cancelled.	Cancel the booking and confirm that the Zoom meeting is removed.
`user:read:user`	Read the authorized user's basic Zoom profile so CRM can display which account is connected.	After authorization, confirm that the connected Zoom email is shown in Booking Settings.

4. Authorize the Development App

In Bookings → Settings, disconnect Zoom first if the Development reviewer connection is already active.
Confirm that the Zoom card shows Development review mode and Not connected.
Select Connect.
Sign in to the Zoom account used for Marketplace review.
Review the four permissions listed above.
Select Allow.
Confirm that Zoom returns to https://crm.unitix.pro/api/zoom/callback.
Confirm that the Zoom card shows Connected · Development review and the authorized Zoom email.

Expected Result

Development OAuth succeeds and the reviewer connection is stored independently from every Production Zoom connection.

5. Create a Zoom Meeting

Open Bookings → Scheduling.
Create or open an active test booking page owned by the reviewer account.
Select Zoom as its meeting provider and save.
Open the public booking page in a private browser window.
Choose a future available time and enter reviewer-controlled dummy contact details.
Submit the booking.
Return to Bookings → Meetings and open the new meeting.
Confirm that the provider is Zoom and that a participant join link is available.
Optionally confirm in the authorized Zoom account that exactly one matching meeting exists.

Expected Result

UNITIX Soft CRM creates one Zoom meeting owned by the authorized reviewer Zoom user and saves its participant join information in the CRM booking.

6. Update or Reschedule the Meeting

In Bookings → Meetings, open the meeting created above.
Select Edit meeting.
Choose a different future date or time that is available.
Save the change.
Reopen the meeting and confirm that the CRM time changed.
Open History and confirm that the Zoom update completed successfully.
Check the authorized Zoom account and confirm that the original meeting has the new time.
Confirm that no second Zoom meeting was created.

Expected Result

The existing Zoom meeting is updated through meeting:update:meeting; its meeting identity is retained and only its scheduled details change.

7. Delete the Zoom Meeting by Cancelling the Booking

Open the booking's protected Reschedule or cancel link from the confirmation screen or reviewer-controlled confirmation email.
Select Cancel meeting.
Optionally enter a test cancellation reason.
Confirm cancellation.
Return to Bookings → Meetings and confirm that the booking is cancelled.
Open History and confirm that the Zoom deletion completed successfully.
Check the authorized Zoom account and confirm that the corresponding meeting no longer exists.

Expected Result

The booking remains as a cancelled CRM record, while its corresponding Zoom meeting is deleted through meeting:delete:meeting.

8. Disconnect and Reconnect

Open Bookings → Settings.
Select Disconnect on the Zoom card and confirm the action.
Confirm that the reviewer Zoom card becomes disconnected.
Confirm that creating a new Zoom booking while disconnected does not create a Zoom meeting.
Select Connect again.
Confirm that the browser again opens the Zoom Development authorization flow.
Select Allow and return to CRM.
Confirm that the Development reviewer connection is active again.

Disconnect asks Zoom to revoke only the Development reviewer grant and removes its local encrypted connection after successful or already-revoked confirmation. A temporary Zoom or network failure keeps the connection for retry. Production Zoom connections are not changed.

9. Expected Results

The dedicated reviewer account is visibly in Development review mode.
The Zoom authorization request uses the Development Client ID and configured Development callback.
All four requested user-level scopes are granted.
The connected Zoom email is displayed.
One Zoom meeting is created for the test booking.
Rescheduling updates the same Zoom meeting.
Cancelling deletes the corresponding Zoom meeting.
Disconnect removes only the Development reviewer authorization.
Reconnect again uses Development OAuth.
Ordinary UNITIX Soft CRM users and their Production Zoom connections are unchanged.

10. Troubleshooting

The Zoom card does not show Development review mode: Confirm that you signed in with the exact dedicated reviewer CRM account supplied privately. Sign out before switching accounts.
The wrong Client ID appears: Stop the test and return to Booking Settings. Do not authorize the app. Confirm that the dedicated reviewer account and reviewer-only Connect action are being used.
Redirect URI mismatch: Confirm that both the Development redirect URL and Development OAuth Allow List exactly match https://crm.unitix.pro/api/zoom/callback.
A required permission is missing: Confirm that all four scopes are enabled in the Zoom Marketplace Development version, disconnect the Development reviewer connection, and authorize again.
Create succeeds but update or delete fails: Reconnect after confirming meeting:update:meeting and meeting:delete:meeting are enabled. Existing grants do not automatically receive newly added permissions.
No join link is created: Confirm that Zoom is connected in Development review mode, the booking page owner is the reviewer account, Zoom is selected as provider, and the booking is confirmed.
Need assistance: Email support@unitixsoft.pro with the test step, approximate time and visible error. Never send passwords, Client Secrets, OAuth tokens, meeting host URLs, or ZAK values.