swagger: '2.0'
info:
  title: Alvaria&trade; Cloud Web Token Authorization Service REST API
  version: 2.0.2
  contact:
    name: Alvaria&trade;
    url: 'https://www.alvaria.com'
    email: support@alvaria.com
  license:
    name: 'License: Creative Commons Attribution 4.0 International Public License'
    url: 'https://creativecommons.org/licenses/by/4.0/legalcode'
  description: |
    # Overview
    The Alvaria&trade; Cloud Web Token Authorization Service generates a Web Token for use in Web Chat and Web Voice Callback. The Web Token is passed in the REST session connection requests to Streaming and Messaging endpoints. This endpoint provides organization and IP based rate limiting without requiring a user login.

    # Steps to establish a WebChat session

    ## Get Web Token
    ```
      // Alvaria&trade; Web Token example response
      {
        "tokenId": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmdJZCI6InBhdHMiLCJpYXQiOjE1NzYxNzc1MDQsImV4cCI6MTU3NjE4MTEwNH0.5AGaoYV0bw6bwC6NiIIK0eS5-yMbszHHN3Cnf1PMvOE",
        "expirationTime": "2020-06-02T20:28:30Z"
      }
    ```

    The first step is to [get an Alvaria&trade; Web Token](#get-token), which provides organization and IP based rate limiting without requiring a user login. The return value's `tokenId` is used as the Bearer token in all subsequent REST calls.

    ## Establish a Streaming session
      ```
      // Alvaria&trade; Public Web Streaming Create Session example response
      {
        "sessionId": "ab7dbcbc-c041-4ac0-8ca0-5a0961f7be5",
        "creationTime": "1985-04-12T23:20:50.525Z",
        "inactivityDelay": 60
      }
    ```

    The end-user's browser receives server-side messages (from an agent or a self-service script) using long polling. This is initialized by creating a Streaming session to the [Create Session](ViaStreamingClientPublicChatSwagger.html#create-session) endpoint, which responds with a Streaming `sessionId`. Each poll request must contain this Streaming `sessionId` and previously created Alvaria Web Token `tokenId`.
    
    To create a Streaming `sessionId`, the following endpoint requires the newly created `tokenId`. The Streaming endpoint will internally validate the `tokenId` before returning a 200 OK and the Streaming `sessionId`. We have a default server-side Streaming session timeout of 60 seconds, which will clean up server-side session information if the end-user's browser is closed and stops polling for messages. This timeout is of particular importance to mobile web browsers and desktop browsers where the end-user will navigate to a different tab or window. Each browser implements power saving differently, so there is no guarantee a browser will continue to send long polling messages if the current browser tab/window is not active. The default timeout can be overridden during Streaming session initialization if 60 seconds is insufficient.

    After establishing a streaming session, we have a `tokenId` and a value for `via-client-sessionid`, which will be passed on all subsequent REST calls to the server.

    ### Long Polling
    ```
    // jQuery long polling example
    function LongPoll() {
      var orgId = "viademo"
      var tokenURL = new URL("https://" + orgId + ".via.aspect-cloud.net/via/v2/organizations/" + orgId + "/streaming/events/webClient?maxEvents=1")
      // Example: https://viademo.via.aspect-cloud.net/via/v2/organizations/viademo/streaming/events/webClient?maxEvents=1
    
      return $.ajax({
          url: tokenURL,
          type: 'GET',
          dataType: 'json',
          crossDomain: true,
          xhrFields: {
            withCredentials: false          // Needs to be false in order to allow cross domain calls to our endpoint.
          },
          beforeSend: function(xhr) {
            xhr.setRequestHeader('Authorization', 'Bearer ' + tokenId)
          },
          headers: {
            'Accept': 'application/json',
            'x-api-key': string,            // Unique to each organization.
            'via-client-sessionid': string
          },
          success: function(result) {
            if (result.totalItems && result.totalItems > 0) {
              for (const event of result.events) {
                const messageObject = JSON.parse(event.payload)
              }
            }
            // If there are no events on the server side queue after 15 seconds, 
            // the server will respond with "totalItems": 0 in the JSON payload.
    
    
            // Either way, time for the next long poll to the server
            LongPoll();
          },
          error: function(error) {
            if (error && error.responseJSON.code == 429 || error.responseJSON.code === 500)) {
              // Too many requests or server side issue - wait and try again
              window.setTimeout(LongPoll(), 5000);
            }
            else {
              // Session was closed server-side. Clean up chat session on client side, s 
              // and stop long polling server.
            }
          }
      });
    }
    ```
    To retrieve server-side messages, a long polling loop should be implemented. If no messages are available after 15 seconds, the REST GET request will return with an empty event array (see below for examples with and without an event from the server). Another GET request should be sent immediately after the response. If there are server-side messages to be retrieved within the 15 second window, it will be immediately returned and another GET request should also be sent immediately.

    Multiple events can be requested from the server in each request using the URL parameter maxEvents, which will return an array of events, but for this example we will request one event.
    
    Alvaria&trade; Streaming is defined in [Alvaria&trade; Cloud Streaming Public Chat Client REST API](ViaStreamingClientPublicChatSwagger.html).

    ## Connect to Messaging
    ```
      // Example connect body for Web Chat sessions
      requestBody = {
        "workTypeId": 79,
        "contactName": "Ryan Tucker",
        "contactEmail": "Ryan.Tucker@alvaria.com",
        "contactDataCollection": [{
          "contactDataKey": "szUserDefined1",
          "contactDataValue": "12345"
        }]
      }
    ```

    To send messages to the server, the Alvaria Messaging endpoint is used. The Alvaria Web Token and Streaming `sessionId` from the previous two steps needs to be passed in each message. 

    ### Messaging for WebChat

    For Web Chat sessions, the [Connect](ViaMessagingClientPublicChatSwagger.html#connect) message body must contain the `workTypeId` so the session can be properly routed and a `contactName` to be displayed to the Agent. Optional fields include an `contactEmail` address and an array of up to 20 `UserDefined` fields.

    ### Messaging for scheduling a Voice Call Back
    ```
    // Example scheduleCallBack body for Voice Call Back
    requestBody = {
      "workTypeId": 32,
      "contactName": "Joe Bloggs",
      "digits": "555 1234",
      "callBackTime": "2017-11-12T18:00:00.000Z",
      "delayStartDuration": 30,
      "contactDataCollection": [{
        "contactDataKey": "Account Number",
        "contactDataValue": "1234-5678-9999"
      }]
    }
    ```

    For Voice Call Back, the [Schedule](#schedule-callback) message body must contain the `workTypeId` so the session can be properly routed to an Outbound Voice WorkType, a `contactName` to be displayed to the Agent, a phone number (`digits`) the agent should call, and either a specific timestamp (`callBackTime`) when, or number of minutes (`delayStartDuration`) until, the call should be made. Optionally, an array of up to 20 `UserDefined` fields can be added.

    Alvaria&trade; Messaging is defined in [Alvaria&trade; Messaging API](ViaMessagingClientPublicChatSwagger.html).

    # Ending a WebChat session
    The client can end a Web Chat session one of two ways. The preferred method is to send a POST to the messaging [Disconnect](ViaMessagingClientPublicChatSwagger.html#disconnect) endpoint, which will immediately send a wrap message to the Agent (if there is one in the session), and properly dispose server-side resources related to the session. The other method is to stop sending long poll GET requests for more than sixty seconds or the value of the `inactivityDelay` override parameter optionally passed on session initialization. In this case, the server will wait the specified `inactivityDelay` seconds before cleaning up the session. 
    
    Use cases for the second method include the customer closing the browser/tab associated with the long polling requests, network disconnect, or the browser entering a sleep/power save state due to the end-user no longer focusing on the browser/tab. See [Create Session](ViaStreamingClientPublicChatSwagger.html#create-session) for more details.

    # Troubleshooting
    If you receive 401 status from the GET [Get Events](ViaStreamingClientPublicChatSwagger.html#get-events) endpoint and it contains the content shown in the panel to the right:

    ```
      {
        "message": "Invalid or expired session"
      }
    ```

    You must create a new streaming session using the POST [Create Session](ViaStreamingClientPublicChatSwagger.html#create-session) endpoint. Do not use the sessionId that caused the error in any further streaming API calls.

    # More Information
    To see all Alvaria&trade; Cloud API documentation, see the [Alvaria&trade; Cloud REST API Developer's Guide](ViaRestDeveloperGuide.html).

host: org.via.aspect-cloud.net
schemes: 
  - https
paths:
  '/via/v2/organizations/{orgId}/webToken/tokens':
    post:
      operationId: Get Token
      summary: 'Generates a Web Token based on the orgId'
      description: Generates a Web Token for use in Web Chat and Web Callback.
      tags:
        - Tokens
      consumes:
        - application/json
      parameters:
        - name: orgId
          in: path
          description: Name of customer organization.
          required: true
          type: string
        - name: x-api-key
          in: header
          required: true
          type: string
          description: Alvaria-provided value used to track API endpoint usage.
      responses:
        '200':
          description: OK
          schema:
            $ref: "#/definitions/GenerateTokenResponse"
        '401':
          description: Request error
        '404':
          description: Page not found
          schema:
            $ref: '#/definitions/ErrorResponse'
        '429':
          description: Too Many Requests
        '502':
          description: Bad Gateway
        '503':
          description: Service Unavailable
      produces:
        - application/json
definitions:
  GenerateTokenResponse:
    type: object
    properties:
      tokenId:
        type: string
        description: The Web Token
        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmdJZCI6InBhdHMiLCJpYXQiOjE1NzYxNzc1MDQsImV4cCI6MTU3NjE4MTEwNH0.5AGaoYV0bw6bwC6NiIIK0eS5-yMbszHHN3Cnf1PMvOE
      expirationTime:
        type: string
        description: Token expiration time in ISO8601 standard format.
        format: date-time
        example: "2020-06-02T20:28:30Z"
  ErrorResponse:
    required:
      - code
      - message
    properties:
      code:
        type: integer
        format: int32
        example: 404
      message:
        type: string
        example: "Page not found"