← API Reference
Provider Guide

Zalo authorization

Zalo only supports QR code login. No credentials are needed up front — the user identity is discovered through the QR scan.

qrcode

Zalo QR login: no credentials up front. The user identity is revealed by the QR scan and returned through the session payload.

  1. 1. POST /v1/accounts with provider=zalo, auth_mode=qrcode.
  2. 2. POST /v1/accounts/{account_id}/auth/qr/start — auth_payload.token in the response is the QR token to render.
  3. 3. Poll POST /v1/accounts/{account_id}/auth/qr/check. Expired tokens return qrcode_expired and require a new qr/start.
  4. 4. On success, POST /v1/accounts/{account_id}/runtime/start.

Notes

  • Expired QR tokens return status=qrcode_expired. Call qr/start again to obtain a fresh token.
  • A webhook endpoint is required so authentication and message events can be delivered.
  • Thread type 0 means a user/friend conversation and 1 means a group. This is normalized when sending messages.