Discussions

Updates to User Authentication, User Profile Push, & Point Gift Auto Rewards

Note: The release for Point Gift Auto Rewards has been delayed, it is currently slated to be related on May 11th, 2020.

Please see below for a series of updates CrowdTwist will be releasing on May 4th, 2020.

USER AUTHENTICATION SIGN IN ENDPOINT: DEACTIVATED MEMBERS

Overview: CrowdTwist is updating how the User Authentication Sign In API responds for a deactivated member. No changes are being made for an active member.

What is changing: Today if a User Authentication Sign In API call is made for a deactivated member, the platform returns a redirect_url and the member is permitted to sign in. During the redirect process, CrowdTwist does not place active cookies for this member, as they are deactivated (should not see loyalty content). This can create a ‘broken’ site experience for the member as the loyalty content is missing.  With this change, the endpoint will now return a 403 Forbidden error response and allow for clients to intentionally drive the experience for these customers through error handling.

Client action required: Please work with your technical teams to ensure that the returned 403 response will be handled appropriately during the login process according to your business rules. This could include allowing the member to successfully log in to their online account while forbidding access to loyalty pages, or to prevent the log in entirely prompting the user to try again or contact customer service.

Feature Release Date: May 4th, 2020

USER PROFILE PUSH: SECURITY UPDATES

Overview: CrowdTwist is updating our Live and Batch User Profile feed such that Password, hashAlgorithmID, and Salt attributes will contain null values.

What is changing: User Profile Batch Push, User Profile Live Push. Three fields included within the CrowdTwist User Profile Push (Password, hashAlgorithmID, and Salt) will now return null values moving forward in an effort to increase security. The attributes themselves will NOT be removed.

Feature Release Date: May 4th, 2020

AUTO REWARDS: POINT GIFTS

Overview: CrowdTwist is updating how point-gift auto rewards are awarded and reported within the platform.

What is changing: Point-Gifts that are awarded as part of an auto-reward campaign will now be treated as their own distinct activities as opposed to being categorized as part of 'ad-hoc points'. Each point gift auto reward will have a unique activity ID that can be easily mapped back to its campaign for reporting purposes. This will benefit both CrowdTwist reporting dashboards and client reporting based on data in the User Activity push feeds. Points already awarded will not be changed, but any active or new campaigns will use their own separate activity for awarding going forward.

Feature Release Date: May 4th, 2020

Post edited by Unknown User on
Tagged:
Sign In or Register to comment.