Zoom Marketplace app update

DaoYue Calendar Scope Test Plan

This page is the reviewer-facing test plan for the DaoYue Zoom Marketplace update that adds Zoom Workplace Calendar event mirror support. It is written for Zoom Marketplace reviewers and covers each newly requested Calendar scope with concrete steps, expected results, and the required Development Client ID authorization path.

Zoom product boundary

This update creates a Zoom Calendar event through /calendars/{calId}/events.

It does not create the separate Zoom Events product through /zoom_events/events and does not request zoom_events:* scopes.

Release notes link

https://daoyue.app/docs/zoom/app-update-test-plan

App name

DaoYue

Sandbox data

Review-only test data; no real customers.

OAuth mode

Use the DaoYue Development Client ID entry.

Feature tested

Zoom Workplace Calendar event mirror.

Required authorization path

For this update request, reviewers must authorize from inside the DaoYue test account, not from the Marketplace Production OAuth URL. After signing in to DaoYue, use the Zoom provider card at https://daoyue.app/admin/zoom-review/availability.

For a fresh reviewer handoff, the provider card starts disconnected. Click 連結 Zoom (Connect Zoom). If you already connected this same Zoom test account earlier in the current review, keep it connected and continue. If you did not create the visible connection or the connected account is unexpected, stop and notify DaoYue instead of manually removing it. The server-controlled zoom-review sandbox generates the Development Client ID authorization URL for this app update.

Step-by-step reviewer flow

1Use the DaoYue test account credentials supplied in the Zoom Marketplace App Submission test-account fields. The account is seeded with test-only data.
2Sign in at https://daoyue.app/admin/login.
3Open https://daoyue.app/admin/zoom-review/availability.
4For a fresh review handoff, the DaoYue Zoom provider card starts disconnected. Click 連結 Zoom (Connect Zoom). If you already connected this same Zoom test account earlier in the current review, keep it connected and continue. If you did not create the visible connection or the connected account is unexpected, stop and notify DaoYue instead of manually removing it.
5Authorize DaoYue with the reviewer's Zoom test account. This DaoYue test-account button generates the Development Client ID authorization URL for this app update. Do not use the Marketplace Production OAuth URL for this test.
6The review sandbox automatically enables Zoom Calendar event mirroring after a calendar-capable Development OAuth grant.
7Confirm the DaoYue provider card shows Zoom as connected and the Zoom Calendar event mirror as enabled. If no calendar name is shown yet, the first mirrored booking automatically selects a writable Zoom Calendar.
8Do not continue if the provider card does not show the mirror as enabled before booking; notify DaoYue instead.
9Open https://daoyue.app/w/zoom-review and submit a booking for Zoom Review Online Session from desktop Chrome or another standard browser. The review sandbox accepts Email guest booking for this public booking flow, so a LINE account is not required. The sandbox service is auto-confirmed and does not require payment.
10Open https://daoyue.app/admin/zoom-review/bookings, switch to Upcoming / 已排程 if needed, and open the newly created booking.
11Confirm the booking is already confirmed and the private meeting details show Zoom join URL, meeting ID, and passcode.
12Confirm the authorized Zoom account receives one privacy-safe Zoom Calendar event for the booking. In Zoom Workplace desktop Calendar, the event should appear at the booked time and open the same Zoom meeting.
13From the booking detail, run the reschedule/admin change flow to move the booking to another available time. Confirm the stored Zoom Calendar event updates to the new time and no duplicate event is created.
14Cancel the same confirmed booking from the booking detail. Confirm the Zoom Calendar event is removed from the authorized Zoom calendar.

New Calendar scopes and evidence

Scope

How DaoYue uses it

Reviewer evidence

calendar:read:list_calendar_lists

When no calendar is already selected, the first mirrored booking lists the authorized user's writable Zoom calendars and selects one before creating the event.

After the first booking, the provider card displays the selected writable Zoom Calendar and the authorized Zoom account contains the new event.

calendar:write:event

When the reviewer submits an auto-confirmed Zoom Review Online Session booking, DaoYue creates one Zoom Calendar event for that booking.

The booking detail contains Zoom meeting information and the authorized Zoom calendar receives one privacy-safe event.

calendar:update:event

When the reviewer reschedules the confirmed booking, DaoYue updates the existing Zoom Calendar event instead of creating a duplicate.

The event moves to the new time and keeps representing the same booking.

calendar:delete:event

When the reviewer cancels the confirmed booking, DaoYue removes the stored Zoom Calendar event.

The event no longer appears in the authorized Zoom calendar after cancellation.

Expected privacy boundary

1The Zoom Calendar event may include the service name, booking identifier, event time, timezone, Zoom join URL, meeting ID, and passcode.
2The Zoom Calendar event must not include customer name, customer email, phone number, LINE id, intake answers, service-question answers, or internal admin notes.
3The review sandbox contains only test data and the public booking service is no-payment and auto-confirmed to make functional testing immediate.