Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
IT Security ToolsGitHub Release: google/clusterfuzz v2.41.2 (24.09.2026)(24.09.2026 um 14:57 Uhr)
IT Security NachrichtenNew Browser Guard features add protection before and after you click(24.09.2026 um 14:45 Uhr)
IT Security NachrichtenMeta brings Private Processing privacy protections to AI glasses(24.09.2026 um 14:44 Uhr)
IT Security NachrichtenTesla FSD Fails Belgian Safety Tests(24.09.2026 um 14:56 Uhr)
Sicherheitslücken (CVE)CISA Charts New "Quality Era" for Global CVE Program(24.09.2026 um 14:50 Uhr)
IT Security NachrichtenThe cost of intelligence?(24.09.2026 um 15:00 Uhr)
IT Security ToolsGitHub Release: google/clusterfuzz v2.41.2 (24.09.2026)(24.09.2026 um 14:57 Uhr)
IT Security NachrichtenNew Browser Guard features add protection before and after you click(24.09.2026 um 14:45 Uhr)
IT Security NachrichtenMeta brings Private Processing privacy protections to AI glasses(24.09.2026 um 14:44 Uhr)
IT Security NachrichtenTesla FSD Fails Belgian Safety Tests(24.09.2026 um 14:56 Uhr)
Sicherheitslücken (CVE)CISA Charts New "Quality Era" for Global CVE Program(24.09.2026 um 14:50 Uhr)
IT Security NachrichtenThe cost of intelligence?(24.09.2026 um 15:00 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

React JS Embedding: Server Authentication via Access Token

Introduction Embedding analytics in React JS applications is crucial for real-time insights and user experience. React JS embedding empowers developers to integrate analytics seamlessly, enhancing app functionality and interactivity. To…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Introduction



Embedding analytics in React JS applications is crucial for real-time insights and user experience. React JS embedding empowers developers to integrate analytics seamlessly, enhancing app functionality and interactivity. To enhance the customer experience and simplify the embedding process in applications, Bold BI® has added Token API member support in the JS embedding feature starting from version 7.10. This ensures secure and efficient data access, providing users with personalized and dynamic analytical experiences.



In this blog post, we will explore how to use the Token API for authenticating dashboard embedding in React-based applications, providing a step-by-step guide to implement access token securely.



Let's get started.




Step 1: Create a React sample




  1. First, open the command prompt. Ensure that the Node version is installed in your machine by using command node -v; this will display the version number of Node if it's installed correctly.
    node -v


  2. Next, create a react sample using the command npx create-react-app FolderName to set up a new React application in the folder you choose.
    npx create-react-app react-sample


  3. After the React application has been created, open the react application in VS code using the code FolderName. Here, we have used the react-sample as our Folder Name.
    code react-sample


    Step 2: Create the Bold BI instance



  4. Next, install the Bold BI Embedded SDK NPM package by using the command npm install @boldbi/boldbi-embedded-sdk in your terminal to add the necessary SDK to your project environment.
    npm i @boldbi/[email protected]


  5. Next, install the dependent files by using the command npm install to fetch all required dependencies for your project.
    npm install


  6. Navigate to the \src folder and create a component named DashboardRendering along with a file named js. Within the DashboardRendering.js file, set up essential properties such as root URL, site identifier, dashboard ID, and token.



You can easily retrieve the root URL, site identifier, and dashboard ID by downloading the embed configuration file or the dashboard's Get link option in Bold BI Server. For more details, refer to the Embed Settings – Embedded BI | Bold BI Documentation.



import React from 'react';
import ' .. /index';
import { BoldBI } from '@boldbi/boldbi-embedded-sdk';

//Rooturl of the BoldBI. This can be domain name/IP/Localhost along with the '/bi' at the end.
const rootUrl = "http://localhost:60011/bi";

//This is by defaul 'site/site1'. If you have created the new tenant in your onpremise version.
const siteidentifier = "site/site1";

//Unique Id of the Dashboard
const DashboardID = "352eb8e9-8a67-4f7a-a4e2-17d92fd7ca5b";

// Use the Token generated by using Server UI.
const access_token ="LCJJUCI6Ijo6MSIsImlzc3V1ZF9kYXRlIjoiMTcxOTU3MM.81i9G7N_DUy2fH41cRM"


[caption id="" align="alignnone" width="804"]Retrieving the Root URL, Site Identifier, and Dashboard ID from the Downloaded Conf File Retrieving the Root URL, Site Identifier, and Dashboard ID from the Downloaded Conf File[/caption]



Retrieving the Root URL, Site Identifier, and Dashboard ID from the Downloaded Conf FileTo obtain the access_token, you have the option to generate it from the Bold BI server UI or to use the REST API. You can check this documentation for further reference.




  1. Implement the render() method to create the DOM elements and the componentDidMount() method to create the Bold BI instance and render the dashboard in DshboardRendering.js.

    // Use the Token generated by using Server UI.
    const access_token = "LCJJUCI6Ijo6MSIsImlzc3V1ZF9kYXRlIjoiMTcxOTU3MM.81i9G7N_DUy2fH41cRM"
    class Dashboard extends React.Component {
      render() {
          return (
              <div id="DashboardRendering">
                  <div id="dashboard"></div>
              </div>
          );
      }
      async componentDidMount() {
          this.dashboard = BoldBI.create({
              serverUrl: rootUrl + "/" + siteidentifier,
              dashboardId: DashboardID,
              embedContainerId: "dashboard",
              height: "800px",
              width: "1400px",
              token: access_token
          });
          this.dashboard.loadDashboard();
      }
    }
    export default Dashboard;

    [caption id="" align="alignnone" width="748"]Accessing the Token from the Bold BI Server UI and REST API Accessing the Token from the Bold BI Server UI and REST API[/caption]





    1. In the js folder, ensure the code imports the necessary modules. Also, define the App component to render the dashboard component and export it for use in other files.

      import React from 'react';
      import DashboardRendering from './DashboardRendering//DashboardRendering';
      class App extends React.Component {
        render() {
            return (
                <div>
                    <DashboardRendering />
                </div>
            );
        }
      }
      export default App;

      [caption id="" align="alignnone" width="785"]App.js Folder App.js Folder[/caption]





      Step 3: Run the embedding application




      1. Before you can see your application in action, it's essential to launch the React environment. Run the React application using the command npm start, and your development server will initialize.
        npm start


      2. Once the server is up and running, navigate to your web browser. The dashboard will render in the React application, providing you with a visual interface to interact with.



      Dashboard Rendered in React Application



      The limitations of Token API member support in JS embedding



      Although the Token API member support in JS embedding offers many benefits in the world of embedded analytics, it does have some limitations. Here are some embedding modules that cannot be accessed using the Token authentication:




      • Dashboard viewer or designer with dashboard name.

      • Widget embedded with widget name.

      • Edit data sources with the data source name.

      • Views embedded with view name.

      • Multiple widgets embedded with widget name.



      It's important to understand these drawbacks to make informed decisions when implementing this technology.



      The following GIF image provides an overview of the Token API member support in a JS embedded application. Please check it to learn more on how to access the token in embedding.



      Integrating Token Member Support when Embedding in a JS Application



      Conclusion



      I hope this blog has provided you with sufficient insight into embedding a Bold BI® dashboard in a JavaScript application. By using the access token for embedding, you can seamlessly integrate dashboards not only in React embed applications, but also in those built with ASP.NET CoreASP.NET MVCASP.NET, Node.js, and Angular. This support eliminates the need for making up an AuthorizeAPI endpoint for authorization, making the authentication process straightforward and efficient. For further details on embedding dashboards into your application, please refer to this blog and our documentation.



      Get started with Bold BI now by signing up for a free trial based on your interest. If you have any questions about this blog, please don't hesitate to leave a comment below. Additionally, you can reach out to us by submitting your support inquiries through the Bold BI website. If you already have an account, simply log in to submit your question.










SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - React JS Embedding: Server Authentication via Access Token
id: f067960b-9f1c-4b65-80af-df285ffbca48
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "React JS Embedding: Server Aut" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich React JS Embedding: Server Authenticatio.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten React JS Embedding: Server Authentication via Access Token

Thematisch verwandte Begriffe: React, Embedding, Server, Authentication · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick