Creating JWT within the survey flow | XM Community
Skip to main content
Michael_Cooksey
Administrator
11 days ago
Solved

Creating JWT within the survey flow

G
QPN Level 2 ●●
Forum|alt.badge.img+4

I am trying to use Punchh’s dynamic code generation to create a coupon for users. The problem is, the API uses JWT.IO to create a JSON web token and this doesn’t seem to be a common practice within Qualtrics. Any ideas on how to go about accomplishing this? I assume I would need to use JS to create the JWT and concatenate the pieces of the URL in the survey flow, but creating the JWT is the biggest hurdle… 

Best answer by GreyGhost

Here’s a working solution for anyone else that finds themselves in a similar situation. Enjoy & GL! 
 

Qualtrics.SurveyEngine.addOnload(function () {
  /*Place your JavaScript here to run when the page loads*/
  const HMACSHA256 = (stringToSign, secret) => "not_implemented"
  const header = {
    "typ": "JWT",
    "alg": "HS256"
  }
  const encodedHeaders = btoa(JSON.stringify(header))
  const claims = {
    "iss": "title",
    "iat": 1692899630,
    "exp": 1724437103,
    "aud": "www.example.com",
    "sub": "name of coupon",
    "email": "${e://Field/email_user}",
    "first_name": "${e://Field/first_name}",
    "last_name": "${e://Field/last_name}",
    "campaign_id": "XXXXX" //GENERATED TOKEN
  }

  const encodedPlayload = btoa(JSON.stringify(claims))
  const signature = HMACSHA256(`${encodedHeaders}.${encodedPlayload}`, "${e://Field/Code}")
  const encodedSignature = btoa(signature)

  const jwt_1 = encodedHeaders + '.' + encodedPlayload + '.' + encodedSignature;
  Qualtrics.SurveyEngine.setEmbeddedData('JWT', jwt);

});

View original
TusharDalwani
Nikkki
R
3 people like this
  • TusharDalwani
    TusharDalwani
  • Nikkki
    Nikkki
  • R
    Ridashaikh15

3 replies

TomG
Level 8 ●●●●●●●●
Forum|alt.badge.img+27
  • TomG
  • Level 8 ●●●●●●●●
  • 5911 replies
  • August 25, 2023

An alternative would be to create your own web service that handles both JWT and Punchh API interaction.

There are JWT.IO libraries listed for a variety of languages at  https://jwt.io/libraries

G
QPN Level 2 ●●
Forum|alt.badge.img+4
  • GreyGhost
  • Author
  • QPN Level 2 ●●
  • 5 replies
  • August 25, 2023

Thanks, Tom! That would definitely be the preferred solution but the client wants this to be contained within Q. 

G
QPN Level 2 ●●
Forum|alt.badge.img+4
  • GreyGhost
  • Author
  • QPN Level 2 ●●
  • 5 replies
  • Answer
  • August 28, 2023

Here’s a working solution for anyone else that finds themselves in a similar situation. Enjoy & GL! 
 

Qualtrics.SurveyEngine.addOnload(function () {
  /*Place your JavaScript here to run when the page loads*/
  const HMACSHA256 = (stringToSign, secret) => "not_implemented"
  const header = {
    "typ": "JWT",
    "alg": "HS256"
  }
  const encodedHeaders = btoa(JSON.stringify(header))
  const claims = {
    "iss": "title",
    "iat": 1692899630,
    "exp": 1724437103,
    "aud": "www.example.com",
    "sub": "name of coupon",
    "email": "${e://Field/email_user}",
    "first_name": "${e://Field/first_name}",
    "last_name": "${e://Field/last_name}",
    "campaign_id": "XXXXX" //GENERATED TOKEN
  }

  const encodedPlayload = btoa(JSON.stringify(claims))
  const signature = HMACSHA256(`${encodedHeaders}.${encodedPlayload}`, "${e://Field/Code}")
  const encodedSignature = btoa(signature)

  const jwt_1 = encodedHeaders + '.' + encodedPlayload + '.' + encodedSignature;
  Qualtrics.SurveyEngine.setEmbeddedData('JWT', jwt);

});

Shivamvig_sv
1 person likes this
  • Shivamvig_sv
    Shivamvig_sv

Leave a Reply


Terms & Conditions