NAV Navigation
Shell Node.js HTTP

Alvaria™ Cloud Web Token Authorization Service REST API v2.0.2

Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.

Overview

The Alvaria™ Cloud Web Token Authorization Service generates a Web Token for use in Web Chat and Web Voice Callback. The Web Token is passed in the REST session connection requests to Streaming and Messaging endpoints. This endpoint provides organization and IP based rate limiting without requiring a user login.

Steps to establish a WebChat session

Get Web Token

  // Alvaria™ Web Token example response
  {
    "tokenId": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmdJZCI6InBhdHMiLCJpYXQiOjE1NzYxNzc1MDQsImV4cCI6MTU3NjE4MTEwNH0.5AGaoYV0bw6bwC6NiIIK0eS5-yMbszHHN3Cnf1PMvOE",
    "expirationTime": "2020-06-02T20:28:30Z"
  }

The first step is to get an Alvaria™ Web Token, which provides organization and IP based rate limiting without requiring a user login. The return value's tokenId is used as the Bearer token in all subsequent REST calls.

Establish a Streaming session

// Alvaria™ Public Web Streaming Create Session example response
{
  "sessionId": "ab7dbcbc-c041-4ac0-8ca0-5a0961f7be5",
  "creationTime": "1985-04-12T23:20:50.525Z",
  "inactivityDelay": 60
}

The end-user's browser receives server-side messages (from an agent or a self-service script) using long polling. This is initialized by creating a Streaming session to the Create Session endpoint, which responds with a Streaming sessionId. Each poll request must contain this Streaming sessionId and previously created Alvaria Web Token tokenId.

To create a Streaming sessionId, the following endpoint requires the newly created tokenId. The Streaming endpoint will internally validate the tokenId before returning a 200 OK and the Streaming sessionId. We have a default server-side Streaming session timeout of 60 seconds, which will clean up server-side session information if the end-user's browser is closed and stops polling for messages. This timeout is of particular importance to mobile web browsers and desktop browsers where the end-user will navigate to a different tab or window. Each browser implements power saving differently, so there is no guarantee a browser will continue to send long polling messages if the current browser tab/window is not active. The default timeout can be overridden during Streaming session initialization if 60 seconds is insufficient.

After establishing a streaming session, we have a tokenId and a value for via-client-sessionid, which will be passed on all subsequent REST calls to the server.

Long Polling

// jQuery long polling example
function LongPoll() {
  var orgId = "viademo"
  var tokenURL = new URL("https://" + orgId + ".via.aspect-cloud.net/via/v2/organizations/" + orgId + "/streaming/events/webClient?maxEvents=1")
  // Example: https://viademo.via.aspect-cloud.net/via/v2/organizations/viademo/streaming/events/webClient?maxEvents=1

  return $.ajax({
      url: tokenURL,
      type: 'GET',
      dataType: 'json',
      crossDomain: true,
      xhrFields: {
        withCredentials: false          // Needs to be false in order to allow cross domain calls to our endpoint.
      },
      beforeSend: function(xhr) {
        xhr.setRequestHeader('Authorization', 'Bearer ' + tokenId)
      },
      headers: {
        'Accept': 'application/json',
        'x-api-key': string,            // Unique to each organization.
        'via-client-sessionid': string
      },
      success: function(result) {
        if (result.totalItems && result.totalItems > 0) {
          for (const event of result.events) {
            const messageObject = JSON.parse(event.payload)
          }
        }
        // If there are no events on the server side queue after 15 seconds, 
        // the server will respond with "totalItems": 0 in the JSON payload.

        // Either way, time for the next long poll to the server
        LongPoll();
      },
      error: function(error) {
        if (error && error.responseJSON.code == 429 || error.responseJSON.code === 500)) {
          // Too many requests or server side issue - wait and try again
          window.setTimeout(LongPoll(), 5000);
        }
        else {
          // Session was closed server-side. Clean up chat session on client side, s 
          // and stop long polling server.
        }
      }
  });
}

To retrieve server-side messages, a long polling loop should be implemented. If no messages are available after 15 seconds, the REST GET request will return with an empty event array (see below for examples with and without an event from the server). Another GET request should be sent immediately after the response. If there are server-side messages to be retrieved within the 15 second window, it will be immediately returned and another GET request should also be sent immediately.

Multiple events can be requested from the server in each request using the URL parameter maxEvents, which will return an array of events, but for this example we will request one event.

Alvaria™ Streaming is defined in Alvaria™ Cloud Streaming Public Chat Client REST API.

Connect to Messaging

  // Example connect body for Web Chat sessions
  requestBody = {
    "workTypeId": 79,
    "contactName": "Ryan Tucker",
    "contactEmail": "Ryan.Tucker@alvaria.com",
    "contactDataCollection": [{
      "contactDataKey": "szUserDefined1",
      "contactDataValue": "12345"
    }]
  }

To send messages to the server, the Alvaria Messaging endpoint is used. The Alvaria Web Token and Streaming sessionId from the previous two steps needs to be passed in each message.

Messaging for WebChat

For Web Chat sessions, the Connect message body must contain the workTypeId so the session can be properly routed and a contactName to be displayed to the Agent. Optional fields include an contactEmail address and an array of up to 20 UserDefined fields.

Messaging for scheduling a Voice Call Back

// Example scheduleCallBack body for Voice Call Back
requestBody = {
  "workTypeId": 32,
  "contactName": "Joe Bloggs",
  "digits": "555 1234",
  "callBackTime": "2017-11-12T18:00:00.000Z",
  "delayStartDuration": 30,
  "contactDataCollection": [{
    "contactDataKey": "Account Number",
    "contactDataValue": "1234-5678-9999"
  }]
}

For Voice Call Back, the Schedule message body must contain the workTypeId so the session can be properly routed to an Outbound Voice WorkType, a contactName to be displayed to the Agent, a phone number (digits) the agent should call, and either a specific timestamp (callBackTime) when, or number of minutes (delayStartDuration) until, the call should be made. Optionally, an array of up to 20 UserDefined fields can be added.

Alvaria™ Messaging is defined in Alvaria™ Messaging API.

Ending a WebChat session

The client can end a Web Chat session one of two ways. The preferred method is to send a POST to the messaging Disconnect endpoint, which will immediately send a wrap message to the Agent (if there is one in the session), and properly dispose server-side resources related to the session. The other method is to stop sending long poll GET requests for more than sixty seconds or the value of the inactivityDelay override parameter optionally passed on session initialization. In this case, the server will wait the specified inactivityDelay seconds before cleaning up the session.

Use cases for the second method include the customer closing the browser/tab associated with the long polling requests, network disconnect, or the browser entering a sleep/power save state due to the end-user no longer focusing on the browser/tab. See Create Session for more details.

Troubleshooting

If you receive 401 status from the GET Get Events endpoint and it contains the content shown in the panel to the right:

  {
    "message": "Invalid or expired session"
  }

You must create a new streaming session using the POST Create Session endpoint. Do not use the sessionId that caused the error in any further streaming API calls.

More Information

To see all Alvaria™ Cloud API documentation, see the Alvaria™ Cloud REST API Developer's Guide.

Base URLs:

License: License: Creative Commons Attribution 4.0 International Public License

Tokens

Generates a Web Token based on the orgId

Code samples

# You can also use wget
curl -X POST https://org.via.aspect-cloud.net/via/v2/organizations/{orgId}/webToken/tokens \
  -H 'Accept: application/json' \
  -H 'x-api-key: string'

const fetch = require('node-fetch');

const headers = {
  'Accept':'application/json',
  'x-api-key':'string'
};

fetch('https://org.via.aspect-cloud.net/via/v2/organizations/{orgId}/webToken/tokens',
{
  method: 'POST',

  headers: headers
})
.then(function(res) {
    return res.json();
}).then(function(body) {
    console.log(body);
});

POST https://org.via.aspect-cloud.net/via/v2/organizations/{orgId}/webToken/tokens HTTP/1.1
Host: org.via.aspect-cloud.net
Accept: application/json
x-api-key: string

POST /via/v2/organizations/{orgId}/webToken/tokens

Generates a Web Token for use in Web Chat and Web Callback.

Parameters

Name In Type Required Description
orgId path string true Name of customer organization.
x-api-key header string true Alvaria-provided value used to track API endpoint usage.

Example responses

200 Response

{
  "tokenId": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmdJZCI6InBhdHMiLCJpYXQiOjE1NzYxNzc1MDQsImV4cCI6MTU3NjE4MTEwNH0.5AGaoYV0bw6bwC6NiIIK0eS5-yMbszHHN3Cnf1PMvOE",
  "expirationTime": "2020-06-02T20:28:30Z"
}

Responses

Status Meaning Description Schema
200 OK OK GenerateTokenResponse
401 Unauthorized Request error None
404 Not Found Page not found ErrorResponse
429 Too Many Requests Too Many Requests None
502 Bad Gateway Bad Gateway None
503 Service Unavailable Service Unavailable None

Schemas

GenerateTokenResponse

{
  "tokenId": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmdJZCI6InBhdHMiLCJpYXQiOjE1NzYxNzc1MDQsImV4cCI6MTU3NjE4MTEwNH0.5AGaoYV0bw6bwC6NiIIK0eS5-yMbszHHN3Cnf1PMvOE",
  "expirationTime": "2020-06-02T20:28:30Z"
}

Properties

Name Type Required Restrictions Description
tokenId string false none The Web Token
expirationTime string(date-time) false none Token expiration time in ISO8601 standard format.

ErrorResponse

{
  "code": 404,
  "message": "Page not found"
}

Properties

Name Type Required Restrictions Description
code integer(int32) true none none
message string true none none