Passing confidential information from portal to webchatbot
Hi Team,
We have a requirement to get account number from portal to webchatbot channel once the customer initiates the chat. referring to "pegaHelperExtension.js" provided by Pega OOTB we see there are setCookie and getCookie functions to fetch these inputs. But these variables are visible in the network trace and leads to client security concern.
sample snippet from pegaHelperExtension.js file
pegaAParamObj.AccountNumber=getCookie("AccountNumber");
Can you please suggest any secure way to achieve this requirement?
Updated: 7 May 2021 16:42 EDT
Pegasystems Inc.
US
@AbdulAhad The code given in the PegaHelperExtension is an example of how to pass the data from desktop to the Webchatbot. In the actual implementation you would pass some other item like session ID or some other identifier that can then be looked up by the server.
https://community.pega.com/knowledgebase/articles/configuring-chat-pega-customer-service/passing-custom-data-chatbot article explains how to pass and process custom data to the Chatbot. You would take the data passed in and using the SetContactContextWebChatbot data transform, set the actual customer information.
Normally, some sort of a session id would be stored as the cookie, which would have been generated by the Website's authentication process. That is what you would pass through, not the actual account number or any other PII.