Whitelisting Domain without API token | Community
Skip to main content

Whitelisting Domain without API token

  • July 29, 2022
  • 2 replies
  • 0 views

Neha11

Hi Team Zendesk,

I am building an integration where in I load my private app in top bar via iframe. My private app is running on a separate server and I want to whitelist that particular domain. I am adding it to manifest.json however on setting it to true, the URL gets encrypted and doesn't pass to my iframe. I am not calling any API from zendesk , I just need to do bi directional communication. Can you please help?

My code:-

client.metadata().then(function (metadata) {
let url = metadata.settings.myprivateapp;
document.getElementById("myprivateappFrame").setAttribute("src", url);
}

Here's my manifest.json :-

"domainWhitelist": ["myprivateapp.org/"],

"parameters": [
{
"name": "myprivateapp",
"type": "url",
"required": true,
"secure": true,
"default": "https:/www.myprivateapp.org/"
}
],

2 replies

Neha11
  • Author
  • August 1, 2022

@greg29 Can you please help me here.


Eric27
  • August 1, 2022
Hey there,
 
It looks like you'd have a much cleaner experience if you just set your application as server side. We have a pretty great tutorial that covers how to do this and how to set up bi-directional communication between Zendesk and your server side app. 
 
You can find it here.
 
Hope this helps,