
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
cc-digital-interactions
Advanced tools
This package provides a React component for Webex Engage conversations and a helper to initialize API/auth configuration.
This package provides a React component for Webex Engage conversations and a helper to initialize API/auth configuration.
Engage (React component)initializeApp(dataCenter, jwtToken)Use:
import Engage, { initializeApp } from "cc-digital-interactions";
Install the package and its peer dependencies.
npm install cc-digital-interactions react react-dom @momentum-ui/web-components
# or
yarn add cc-digital-interactions react react-dom @momentum-ui/web-components
# or
pnpm add cc-digital-interactions react react-dom @momentum-ui/web-components
Then register Momentum UI Web Components once in your app (usually at the root):
// e.g., src/main.tsx or src/index.tsx
import "@momentum-ui/web-components";
import React, { useEffect } from "react";
import ReactDOM from "react-dom/client";
import Engage, { initializeApp } from "cc-digital-interactions";
function ConversationsView() {
useEffect(() => {
// 1) Initialize API endpoints + fetch access token using a short-lived JWT
// Call this once (e.g., on app start or when JWT rotates)
initializeApp("qa", "<JWT_FROM_YOUR_BACKEND>");
}, []);
return (
<Engage
conversationId="<CONVERSATION_ID>"
interactionId="<INTERACTION_ID_OR_EMPTY>"
readonly={false}
theme="LIGHT" // LIGHT | DARK
isVisualRebrand={true} // optional UI style
dataCenter="qa" // must match initializeApp's dataCenter
/>
);
}
ReactDOM.createRoot(document.getElementById("root")!).render(
<ConversationsView />,
);
initializeApp(dataCenter: string, jwtToken: string): Promise<void>
jwtToken.Engage and whenever your JWT rotates.Engage component props:
conversationId: string — Target conversation ID (or use interactionId).interactionId: string — Optional interaction ID if available.readonly: boolean — When true, disables authoring actions.theme?: "LIGHT" | "DARK" — Visual theme; defaults to LIGHT.isVisualRebrand?: boolean — Enables the newer visual look and feel.dataCenter?: string — Selects the SignalR endpoint region; should match the value passed to initializeApp.dataCenter valuesUse one of the following keys for both initializeApp(dataCenter, ...) and the Engage prop dataCenter:
intgus1qaprodanz1prodca1prodeu1prodeu2prodsg1produs1These map internally to REST and SignalR endpoints (see source config in src/app/apiConfig.ts).
initializeApp(dataCenter, jwtToken) with that JWT to exchange for an access token used by the SDK.@momentum-ui/web-components is imported once at app startup; otherwise some UI elements may not render.initializeApp before first rendering Engage, and again if your JWT rotates or expires.conversationId or interactionId.dataCenter is consistent between initializeApp and the Engage component to establish SignalR connections correctly.This package ships with type definitions. Props for Engage are derived from the component’s TypeScript source in src/app/App.tsx.
For advanced usage (events, storage, or lower-level APIs), refer to the source modules within src/ in this repository.
FAQs
This package provides a React component for Webex Engage conversations and a helper to initialize API/auth configuration.
We found that cc-digital-interactions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.