Discussions

Hello, I have had a widget up and hosted for about a month now and it has been working flawlessly. I've not touched the code for it, but despite this it has stopped working and suddenly returns an error instead. When loading a page hosting the widget the widget now says "Invalid plug-in token (ERR2)" And the terminal states a very similar problem, but with slightly more detail referring to JWT. https://i.imgur.com/AsxQpkn.png Any help would be appreciated.

Hey, I'm preparing a plugin which triggers a file download but it get's blocked because the widget iframe's sandbox attribute it missing "allow-downloads". Did you leave it out intentionally or is there a chance you're adding it in some of the next versions? I'm receiving this error: Download is disallowed. The frame initiating or instantiating the download is sandboxed, but the flag ‘allow-downloads’ is not set. See https://www.chromestatus.com/feature/5706745674465280 for more details. BR, Lars.

I wonder if the webhook's "instanceId" is the same id as the "src" query parameter that get's attached to the plugin's entrypoint url. If that's case it would be great when this gets mentioned in the webhook documentation.

Hello, in the Haiilo instance community.haiilo.com our plugin is not loaded reliably . We have not been able to reproduce the error in other instances. The request <https://community.haiilo.com/web/plugins/ec8f7316-d38a-4e68-828e-8a2efe614f2e/init?srcld=7b0285c7-1dc2-47b1-ae34-fdeacf8c2171-94dc03f0-dbfd-4c2f-8823-d28b1e9afb35&jti=vZIINPs74iaJrNuC> gets a 400 error back in cases where the plugin is not loaded. Any help will be appreciated :) Best, Simon

Image a plugin where users interact with each other. Current viewing user see's the other user's interaction. I like to display their avatars next to their names. Can you give some hints if and how that's possible? I tried the following: Fetch `/api/users` REST API and get their `imageUrls.avatar`. Replace `/api` with `/web` and place this URL into an IMG-tag inside the plugin. This works for Firefox, but Chrome denies this due to SameSite-Attribute of COYOSESSION cookie.

Hi, i'm Chris from Scitotec. We wan't to start implementing our Plugin for Coyo. Unfortunately we don't have access to an development Instance of Coyo to test the Plugin. Is there a docker stack we could use for us or how can we get a hold of a development instance? Best Regards Chris Langenberg

This ticket refers to the customer ticket 56816. In a Haiilo instance of our customer, sometimes the Haiilo plugin cannot be initialized. In the console you can see an ERR6 with the error message "ERROR PluginError: Initialization timed out after 60000ms (ERR6) at 672.5ce4467c03910880.js:1:15927". If the page is reloaded in such cases, the plugin is initialized correctly afterwards. Noticeable is that before that another error message "Uncaught TypeError: Cannot read properties of null (reading 'contentwindow') at init.js?id=0fa78adf...7&lang=en-US:185:78" appears and then after 60000ms the ERR6 code appears. I have two screenshots showing the behavior. I myself, cannot reproduce in our Haiilo test instance the problem. Here the plugin is always loaded. Where does the error "Uncaught TypeError: Cannot read properties of null (reading 'contentwindow') at init.js?id=0fa78adf...7&lang=en-US:185:78" and do you think this error is related to ERR6? Thanks, Simon

Hi, it would be very convenient, if the plugin adapters init method would also deliver the pluginId. Currently it seems that among some other data, one can only retrieve the tenantId and the pluginInstanceId. Is there anything that would speak up against adding the pluginId to the init response? Would be great. Our current workaround is an extra endpoint in our plugin host backend database to get the pluginId, which is needed for further requests. But we are not too sure if the mapping (tenantId, pluginInstanceId) -> (pluginId) is unique, which forces us to pick the first match in our database. Kind regards, Alex

Hey team, I have found a critical bug in coyo which leads to sensitive information disclosure where can i report that bug?And do u have any bug bounty program?