Authentication and user identity validation

Hello,
We are trying to use Webchat conversation API.
Connection as anonymous and JWT generation was a success but now i want to know if the first request, the one who generate JWT token with info given in the request can be made as a client credential authenticated user?
In fact, we want to be able to authenticate our user but without OIDC integration, so the idea is to create a proxy backend in our infra and let this proxy create JWT for our front client (or for messenger widget if possible).
Is something like that is possible?
Thanks by advance

Hi Pierre,

Just a quick clarifying question, are you trying to use our WebChat conversation API and messaging conversation API. I ask because our webchat API is our legacy chat offering, but has no continuing R&D investment. Our web messaging API is where Genesys is currently focusing most of our energy on.

Thanks,
John

Hello,
thanks for the answer,
we are working in priority on the messaging api and/or messenger as described here : Web messaging overview - Genesys Cloud Resource Center (mypurecloud.com) but if the way we want to do is not possible in the new old and possible in the old one, no problem to work on old one.

No, the guest must create the chat at then use the JWT they're given for all future operations. You must not expose client credentials to the guest; that will result in guest users gaining access to generate their own auth tokens and make authorized request to your org's API endpoints.

Thanks for your answer. Yes of course.
In fact our idea was to create a proxy Api with users authenticated with our internal IDP on it.
By this way, our proxy could be authenticated on Genesys API with client ID/Secret and we could generate JWT for our authenticated user by hyper trust on Genesys API.
Our API securise internal call and we parameterize Genesy API to refuse anonymous.

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.