XBS Anonymous
Initial
XBS Anonymous authorization is used when a person needs to enter an x-bees chat without signing in with a regular x-bees account.
The main use cases are:
- anonymous chat from a Kite widget, when anonymous sessions are enabled for that widget;
- direct entry by link into a public chat.
XBS Anonymous is a chat-only authorization type. It is not a way to use x-bees without an account in general, and it does not provide access to the full x-bees application.
Scope
The scope of XBS Anonymous is intentionally limited. Anonymous users can only use the commands that might be required to work with a chat and files in an allowed chat context.
Most regular x-bees functionality is not available with XBS Anonymous authorization, so anonymous users doesn't have an access to calendar scenarios, unrestricted channel browsing, non-public chats etc.
Available Commands
Only the following x-bees conversations commands are available with XBS Anonymous authorization:
GetTokenCommandCreateKiteChannelCommandJoinChannelCommandMarkReadCommandMarkUnreadCommandTriggerMessageActionCommandGetActionTriggerResultCommandUploadFileCommandGetUploadedFileInfoCommandGetFilePresignedDownloadUrlCommand
How to generate token
It is impossible to generate this type of token manually. You can only receive this token after logging into the RNA through the Kite widget with enabled anonymous access, or through the link to a public chat.
Token format example
{
"sub": "ea46289f-dcd1-47e4-b23b-ce3411bcef1c",
"email_verified": false,
"custom:wid": "alfOeWqIKK05",
"iss": "https://cognito-idp.eu-central-1.amazonaws.com/eu-central-1_XArerB9SD",
"cognito:username": "ea46289f-dcd1-47e4-b23b-ce3411bcef1c",
"custom:authorization_type": "XBS_ANONYMOUS",
"origin_jti": "76f7c388-482b-4352-9cf7-13247850be9d",
"aud": "5ksp0berbt54fbo43kq3ob8t5k",
"event_id": "25084be9-b1bd-4b57-afdb-e9f5af445e09",
"token_use": "id",
"auth_time": 1777488044,
"name": "guest",
"exp": 1777491644,
"iat": 1777488044,
"jti": "68b0d7e4-0a6e-49e5-a969-8309c3416465",
"email": "anonymous-alfoewqikk05@anonymous.wildix.com"
}
Field "email" contains synthetic email address, which is generated automatically, and being used only for technical purposes.