WebChat Secret Management

[cleemullins]

Directly from (CSS) Jimmy Russ, as an ask.

Concrete instructions how to use a token for webchat (in C#). There is a "Hard to find" blog for node, but that's it.

We have guidance around "Don't expose your secret", but not guidance around how to actually achieve this.

CSS Ask: Full e2e app/sample working for how to do this.

@yochay has suggestions how to do this.

[cleemullins]

Note: There is significant frustration around this.

[cleemullins]

"Customers give up and just embed the secret in the web page".

[jwiley84]

FWIW: I have a C# bot that, once deployed with a directline channel implemented, takes the DL token and exchanges it for a secret.

https://github.com/jwiley84/SimplifiedDLConnector/tree/master/JJDirectLineBot

[tdurnford]

I have a simple version for node https://github.com/tdurnford/BotBuilder-Samples/blob/2a700aa5b66fd858df35d5279ef847a140121382/samples/javascript_nodejs/48.directline-token/index.js#L55

[jiruss]

I have a simple version for node https://github.com/tdurnford/BotBuilder-Samples/blob/2a700aa5b66fd858df35d5279ef847a140121382/samples/javascript_nodejs/48.directline-token/index.js#L55

@tdurnford I have a little node sample that I have sent customers as well but it lacks documentation. https://github.com/jiruss/WebchatApp/edit/master/app.js

@jwiley84 we run a bot internally that I have similar C# code for that we have shared on occasion.

I want to clarify that the issue is not that we don't have source for the token swap but we lack a clear and concise working sample that isolates just this functionality that can easily be sent to customers. Your code is fine but some customers are not sure how to get this from your code sample into their own environment. Ideally a well documented sample from one of the official repos or in Docs would be best and instill the most confidence. Thanks!

[jwiley84]

@jiruss : Oh, I know. I made that example BECAUSE a customer needed one and couldn't find one.