Resolve webhook user IDs with an API credential, not the webhook secret
A webhook secret token only verifies incoming signed events (Zoom's signature and timestamp headers). It cannot call the platform API. Turning an answer event's user ID into an email needs a Server-to-Server OAuth app (account ID, client ID and secret exchanged for a short-lived …