Chat Widget Auth - Forbidden - Secret invalid

Certainly:

<script type="text/javascript">
window.zESettings = {
  webWidget: {
    authenticate: {
      jwtFn: function (callback) {
        $.ajax({
          url: "/service/GetZendeskJsonWebToken",
          method: "POST",
          success: function (result) {
            callback(result);
          },
        });
      }
    }
  }
};
</script>

And in case you're asking about the server-side JWT generation, here's that too:

// C#

private string GenerateWebToken(byte[] keyBytes, string userEmail)
{
  var tokenHandler = new JwtSecurityTokenHandler();

  SecurityToken token = tokenHandler.CreateToken(new SecurityTokenDescriptor
  {
    Subject = new ClaimsIdentity(new[]
    {
      new Claim("name", userEmail)),
      new Claim("email", userEmail)),
      new Claim("external_id", userEmail)),
    },
    IssuedAt = DateTime.UtcNow,
    Expires = DateTime.UtcNow.AddMinutes(5),
    SigningCredentials = new SigningCredentials(
      new SymmetricSecurityKey(keyBytes),
      SecurityAlgorithms.HmacSha256Signature)
  });
  
  return tokenHandler.WriteToken(token);
}

Thanks very much for your help!

Hi @christopher53, do you have any update on this? Is there any way of getting at logging information about why the error might have been returned?

Thanks

Hello. I am receiving exactly the same 403 from https://marketplacer.zendesk.com/embeddable/authenticate when using 

the below. The documentation said to add “chat" between “authenticate” and “jwtFn”, however when I do that nothing happens at all. I noticed that the javascript code specifies both so tried this. Was there a resolution to the above?

I should mention that I have tried placing this both before and after the script tag for “https://static.zdassets.com/ekr/snippet.js?key=[MYKEY]”

    window.zESettings = {
      webWidget: {
        authenticate: { // authenticate.chat
          jwtFn: function(callback) {
            fetch('/api/int/administration/zendesk_jwt/token').then(function(res) {
              res.text().then(function(jwt) {
                console.log({ jwtEz: jwt });
                callback(jwt);
              });
            });
          }
        }
      }
    };