The Nosto's UGC Embeddable Admin User Interface (EAUI) enables Nosto's UGC OEM partners to embed components of the Visual UGC Admin User Interface into whitelisted systems.
Key features of the EAUI include:
Ability to embed a frameless version of the Nosto Admin Portal into Whitelisted domains.
Ability to manage user sessions within the EAUI iFrame, and perform SSO.
Ability to apply custom ACL rules to the EAUI iFrame
Ability to navigate to pages from outside of the EAUI iFrame
Nosto's UGC EAUI offerings are available as a Plugin for OEM Partners. This plugin can be enabled for partners on their Development Stacks for testing and building integrations.
After a developer has installed the plugin, they will be able to retrieve the OAuth information from Nosto's UGC to reveal the OAuth Access Token.
Before the integration, ensure that you've added the parent page domain to the permitted domain section in the configuration only and use the domain name without the protocol. e.g. awesome.com or stackla.awesome.com (Please do not add the https:// value).
Note: The permitted domain will only be valid for a domain with an SSL certificate (HTTPS)
To embed Nosto's UGC into an existing web portal, please copy the embed code from the configuration page, and add it to the section of your portal where you would like to render the Nosto's UGC page.
An example of the Embed Code is available below:
For the Nosto's UGC EAUI to work, it requires an active Session Token. This token is tied to a specific user and should be generated using OAuth.
As per the standard OAuth process, the steps involved in generating a session token are:
Generate a Short-term Token
Generate Access Token
Generate a Session Token
The steps required are listed below.
Generate the Short Term token by calling the Visual UGC Authenticate API Endpoint and providing the clientId
, redirectUrl,
and a relevant state
Once the OAuth request has been made, a short-term token will be provided in a format similar to below.
Taking the Short-Term Token, a second request can be made to generate an Access Token. The Short Term token should be added to the code
parameter.
Assuming the Exchange is successful, the provided response will contain the following attributes:
Access Tokens will, by default, expire every 365 days.
The final step in the process is now to generate the Session Token. This is done via the Access Token, by making a call to the OEM Session endpoint as per below.
If the exchange Session Token is a success the response will contain the valid session token as data (see example below):
After obtaining the valid Session Token, a developer will need to add it to the embed code data-session-id
(replace [ADD_YOUR_SESSION_TOKEN]
with a valid Session Token).
Session tokens are only valid for one use and have a lifespan of 60 seconds.
Note: If there is a requirement to have a different landing page, you can provide the valid URL page in the embed code as the data attribute data-url-redirect
.
Visual UGC's EAUI has a Javascript API allowing for Developers to calls from a menu system or links on the parent page, respective pages within the Visual UGC User Interface.
The Javascript API calls for Navigation are listed below.
Term Management
Curate Content
Manage Tags
Manage Filters
Manage Widgets
Manage Event Screens
Manage Emails
Asset Manager