Just figured it out, just check the zap request (which is embedded in the zap receipt) for authorization.