Automatically refresh token in webchat

Thanos Vazakas 1

I have created a webchat in Azure and embedded the code in a website. I have created a token using the Azure secret code and the chat works fine, but after 60 min the token expires. How can it automatically be updated before it expires, so that the webchat keeps working?
In a microsoft document it it states "Tokens will automatically be renewed before they expire." but they don't!
Any ideas?
Thank you

VenkateshDodda-MSFT 18,281 Reputation points Microsoft Employee

2022-09-16T04:38:59.913+00:00
@Thanos Vazakas Thank you for reaching out to Microsoft Q&A. Can you help us in sharing more information like

Are you leveraging the App service to host your chat on Azure or on which azure service you are using?

Help us with the documentation that you are following to understand better
Thanos Vazakas 1 Reputation point

2022-09-16T11:02:51.617+00:00

Hi VenKatesh

Thanks for getting back.
Yes, i have created a webbot app in Azure and connected it to the webchat channel. Then i embedded the code and the secret key into a website. The problem with this is that there is no interactivity. The bot just echoes what a person types, if another person opens the webpage where the webchat is they don't see what the 1st person types and vice-versa.
But if i generate a token using the secret key there is interactivity, the 2 persons can chat. But the token expires in 60 min so the chat stops. The token needs to be refreshed before it expires in order for the chat to stay active.
See the documentation here: https://learn.microsoft.com/en-gb/azure/bot-service/bot-service-channel-connect-webchat?view=azure-bot-service-4.0
and here: https://learn.microsoft.com/en-us/azure/bot-service/bot-builder-webchat-overview?view=azure-bot-service-4.0#get-started-with-web-chat

Thanks
VenkateshDodda-MSFT 18,281 Reputation points Microsoft Employee

2022-09-16T11:48:11.617+00:00

@Thanos Vazakas Thanks for your response. Looking at the documentation I have understood that you are using the Azure Bot service I have retagged with Azure-bot-service as well
Thanos Vazakas 1 Reputation point

2022-09-16T13:45:12.883+00:00

OK Venkatesh, when you have any suggestions please let me know.
Steven Kanberg 81 Reputation points

2022-10-25T23:40:28.733+00:00

@Thanos Vazakas ,

I'm a bit late to the game, but I was just reading over your posted issue and there are a couple fundamental problems I'm seeing, right off the bat.

One, you should never include any keys or secrets in your hosting page for Web Chat or any service you are including. Doing so makes those openly available to any individual who simply browses your pages code (easily done in any browser). This is a major security risk as anyone can use those keys for their purposes costing you $$$.

If you are unsure how to get around this, then please look over this Web Chat sample that shows how to build a token server.

Two, Web Chat is specifically built for 1:1 conversations between a user and a bot. It is not intended nor was it designed for accommodating group conversations. It's not that it couldn't work. It's just that you would now be using Web Chat in a manner it was not designed for. Consequently, any issues you come across would not be supported by MS. Just an FYI.

And, while I don't know for certain, it is my suspicion that this is the reason the Web Chat service is not properly renewing the token.
Thanos Vazakas 1 Reputation point

2022-10-27T09:11:02.367+00:00

Hi Steve

Thanks for the info, even if it's late.
After many hours of "playing" with the Web Chat i realised that it is not what i wanted. It is designed so that one user can invite someone to a chat. It's doesn't work as a Live Chat with customers, which is what i thought originally. So, i abandoned the project and found an open source software (Tiledesk) which does what i want. This is for people who may read this post looking for a Live Chat app.
As for the security issue you mentioned, you are dead right, i was testing the Web Chat, it was not in a production environment.