The customer wants to embed the Eddy AI chatbot widget within their Document360 site while ensuring that Eddy respects the logged-in user's Reader Group permissions.
Currently, Eddy AI accessed through the search box respects Reader Group access for users authenticated through Document360 credentials or JWT authentication. However, for the Eddy AI chatbot widget, Reader Group-based content restriction requires JWT authentication.
The limitation is that JWT authentication cannot currently be configured for the Eddy AI widget when the widget is deployed directly within the Document360 site. The Client ID and Client Secret cannot be used to generate the required authentication/login endpoint using the Document360 domain itself.
JWT authentication can only be implemented when the widget is integrated through the customer's own application, where they can manage the authentication flow.