Secure Identity MMOB Signature
To enable secure connection between MMOB and our customers and to prevent snippets from being abused by unauthorised parties, we are using an HMAC signature for more secure authentication method.
There are 4 levels of security choices for our customers:
|Levels of Security||Description|
||No extra security is needed, signature is not necessary for boot mmob snippet|
||This will enable Content Security Policy (CSP) which will stop others to boot mmob snippet without the permission of the snippet’s owner|
||This will enforce security identity feature between mmob and customer, hence, signature is required for customer to boot mmob snippet. Otherwise, a session to a user will not be issued.|
||This is similar to Basic security but it will generate response for debugging usage.|
mmob will provide our customers secret key for generating correct signature.
Create Signature with the provided secret key :
Example of generating HMAC signature with secret key in Typescript:
const : string, cpDeploymentId: string, userEmail: string = ) ;
Pass the signature in mmob snippet
Example mmob snippet for booting:
Was this page helpful?