Widgets

The Wigdet solution allows you to display custom information on the Next dashboard. The information source can be Next Hub or any other system as long as it can fit into an HTML page suitable to display in an iFrame. The image below shows an example widget diplayed on the estate brokers dashboard inside Next.

Manifest

In Next, you can add widget manifest via “Widgets” found on the administration page. In the manifest you spesify the widgets name, url and system rights.

Name (Navn på widget)

The name of the widget is visible in the widget list and as the header of the widget on the dashboard.

Source (Navn på kilde)

The name of the company name that provides the widget. A company can create multiple widgets with different name, but the same source name.

URL

The URL to the widget. This has to be a secure URL (https) and can contain mapping codes.

Mapping codes

Added querystring parameters

Description (Beskrivelse)

A short description of what the widget presents. This is only visible in the widget list in Next.

Validationsecret (Valideringsnøkkel)

A secret which is used to verify that the request is from Next. See URL
verification

Permissions (Tillatelser)

Permissions is based on the iframe sandbox attributes https://www.w3schools.com/tags/att_iframe_sandbox.asp

URL verification

If validationsecret is given, the URL will contain the queryparameter “val”.
The value of val is a Base64 encoded SHA256 hash of the URL.
To verify the URL

1. Extract URL without the “val” parameter.
2. Append the validationsecret to the extracted URL.
3. Generate a SHA256 hash and encode the result with Base64.
4. Compare the value in “val” with the generated base64 encoded SHA256 hash.

Simple C# verification function

    const int maxRequestAgeInMinutes = 5;  //Timelimit of your choice 
    private bool IsValidNextRequest(string url, string secret)
    {
        Uri requestUri = new Uri(url);
        var query = System.Web.HttpUtility.ParseQueryString(requestUri.Query);
        var val = query.Get("val");
        var ts = int.Parse(query.Get("ts"));
        var requestTime = new DateTime(1970, 1, 1, 0, 0, 0, 0, DateTimeKind.Utc).AddSeconds(ts);
                    
        if (Math.Abs(DateTime.UtcNow.Subtract(requestTime).TotalMinutes) > maxRequestAgeInMinutes) 
            return false; //The request was to old.
                    
        var strippedUrl = url.Remove(url.IndexOf("&val="));
                    
        var valueToHash = strippedUrl + secret;
        using (var sha = new System.Security.Cryptography.SHA256Managed())
        {
            var hashValue = sha.ComputeHash(System.Text.Encoding.UTF8.GetBytes(valueToHash));
            var base64Hash = Convert.ToBase64String(hashValue);
                    
            return (base64Hash == val);
        }
    }

Example

Manifest URL

https://widgets.vitecnext.no/widget.html?i=<installationId>&uid=<USERID>&username=<username>&mail=<usermail>

Secret

WGhntutN7j2QjJaAdacq

Requested URL

https://widgets.vitecnext.no/widget.html?i=MSTEST&uid=TU&username=Test+User&mail=test.user%40vitecsoftware.com&loc=1
&src=https%3a%2f%2fcustomer.vitecnext.no
&ver=5.1.0.0&id=wid_348084600&ts=1643569488&val=7PX6n2C%2fu%2ftTCxEOkazijZS8TDpTB89GI6kQsBqHNjY%3d

Based on the requested URL and the secret we can established that the
call was made from Next (validation was a match) at 2022-01-30 19:04:48 (UTC).

Client Script

Client

Enables interaction with Next

Dashboard

Provides functionality for widgets on the Next dashboard

Download

Version 1.0

Initial version that supports widget on the main dashboard.

• Add/modify tab with dropdown
• Add/modify tabgroup
• Events for tabs
• The version of the Next instance
• Location (1=Dashboard)
• Notify Next when widget is ready to present data