Skip to main content

I really love the new “Quick Actions” widget, but I want to create similar thing using HTML, just with our own styling.

 

What is the right way to call the manual action “Attach new playbook” API using HTML?

 

 

Hey ​@ORBR ,

Unfortunately, there is no way to securely execute API requests from the widget code itself. As it would be required to store API credentials within the HTML code, which is going to be visible to any user.

 

Is styling the only concern or you have additional special use cases that you need to solve?


Taking this sideways…

...you *could* have the HTML widget render an iframe hosted on another solution, or at least call a remote API which then points back to SecOps.  This way the API key isn’t in the widget exposed to the analyst, but you still have some authentication/authorisation flow to consider to keep it safe.