Request/Response Authentication
From a technical standpoint, a Survey SDK bridge is an HTTP endpoint that accepts GET requests and responds with JSON.
Request Authentication
Along with the requests to fetch the survey configuration and the responses, Engage Digital will also send a specific X-SDK-SECRET header containing the survey's secret key (see Quick Start) to allow you to make sure that the request actually comes from Engage Digital.
Note
Please note that the X-SDK-SECRET header will be sent by Engage Digital regardless of the survey's verify secret key setting.
Response Authentication
When sending a request to a Survey SDK bridge, Engage Digital will check both the presence and the validity of the X-SDK-SECRET header in the bridge HTTP response.
If the header is not present or if it doesn't match the survey's secret key, the entire response will be considered invalid and will therefore be ignored.
Note
Please note that this verification mechanism can be skipped by turning the survey's verify secret key setting off in Engage Digital.
Realtime Authentication
When receiving a POST request from a Survey SDK bridge, Engage Digital will check both the presence and the validity of the X-SDK-SECRET header in the bridge HTTP request.
If the header is not present or if it doesn't match the survey's secret key, the entire request will be considered invalid and will therefore be ignored.
Note
Please note that this verification mechanism can be skipped by turning the survey's verify secret key setting off in Engage Digital.