The API behind one-tap expert support.

// 1. Ask your backend for a short-lived support token.
const { token } = await fetch("/api/ringdesk/support-token").then((r) => r.json());

// 2. Start the call with the context the agent should see.
const ringdesk = new RingDesk({ publishableKey: "pk_app_example" });

await ringdesk.startSupportCall({
  token,
  context: {
    orderId: "order_4821",
    screen: "delivery-status"
  }
});

// Never expose the secret key in a browser or mobile binary.
app.post("/api/ringdesk/support-token", async (req, res) => {
  const user = await requireSignedInUser(req);

  const response = await fetch("https://api.ringdesk.app/v1/support-tokens", {
    method: "POST",
    headers: {
      "authorization": `Bearer ${process.env.RINGDESK_SECRET_KEY}`,
      "content-type": "application/json"
    },
    body: JSON.stringify({
      customerId: user.id,
      displayName: user.name
    })
  });

  res.json(await response.json());
});

// Verify the signature before trusting the payload.
const signature = req.headers["ringdesk-signature"];
const body = await readRawBody(req);

const expected = await hmacSha256(process.env.RINGDESK_WEBHOOK_SECRET, body);
if (!timingSafeEqual(signature, expected)) return res.status(401).end();

const event = JSON.parse(body);
if (event.type === "call.completed") {
  await saveCallToCrm(event.call);
}
res.status(204).end();