Skip to content

Commit 7b695eb

Browse files
remove user data from jwt, add user id into query param
1 parent 645b3ab commit 7b695eb

File tree

1 file changed

+1
-4
lines changed

1 file changed

+1
-4
lines changed

content/extensions/ui-extensions.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -227,6 +227,7 @@ To help identify the **iframe** caller (insecure) and context, several paramete
227227
For example, when `url` is `https://customerwebsite.com/iframe/`, the called URL is `https://customerwebite.com/iframe/?position=pim.product.tab&user[username]=julia`
228228

229229
For all positions, parameters relative to the connected user and the extension position are sent:
230+
- `user[id]`
230231
- `user[username]`
231232
- `user[email]`
232233
- `user[ui_locale]`
@@ -372,17 +373,13 @@ The JWT token consists of three main parts: the header, the body (payload), and
372373
"iat": 1743410036.116152,
373374
"exp": 1743413636.116162,
374375
"userId": "1",
375-
"userEmail": "[email protected]",
376-
"username": "user1"
377376
}
378377
```
379378

380379
* ```jti``` The unique identifier for the token.
381380
* ```iat``` The issued at time.
382381
* ```exp``` The expiration time of the token.
383382
* ```userId``` The PIM user identifier (in this case, ```1```).
384-
* ```userEmail``` The PIM user email (in this case, ```[email protected]```).
385-
* ```username``` The PIM user name (in this case, ```user1```).
386383

387384

388385
*A signature*

0 commit comments

Comments
 (0)