Developer Q&A - Recent Threads

RE: Is the process of encrypting / decrypting a sessionkey documented?

Lee Bradley — Fri, 02 Feb 2024 17:23:12 GMT

Hi Daniel,

If you're looking at implementing your own decryption code in JS then you'd need something like this

// Values you'll need to get from TNEW admin
 * hmacLength
 * hmacKey
 * blockSize
 * passphrase
 * salt
 * encryptionKeyIterations
 * encryptionKeyLength


let encryptedSessionKey = 'xxxx'; // with base64 encoding (as we pass it via URL parameter)

encryptedSessionKey = Buffer.from(encryptedSessionKey, 'base64');
let hmac = ciphertext.slice(0, hmacLength); // slice hmac based on hmac length
let encryptedMessage = ciphertext.slice(hmacLength); // slice encrypted message (iv + encrypted bytes)

let newMac = crypto.createHmac('sha256', hmacKey); // create a new HMAC based on encrypted message 
newMac.update(encryptedMessage, 'binary');
newMac = newMac.digest('hex');

if (hmac.toString('hex') !== newMac.toString('hex')) {
    throw 'Hmac failure';
}

let iv = encryptedMessage.slice(0, blockSize); // slice iv from encrypted message

let encryptedBytes = encryptedMessage.slice(blockSize); // slice encrypted bytes from encrypted message

let encryptionKey = crypto.pbkdf2Sync(passphrase, salt, encryptionKeyIterations, encryptionKeyLength, 'sha1');// derive key using PBKDF2

let decipher = crypto.createDecipheriv('aes-256-cbc', encryptionKey, iv);// create cbc decipher with key and iv
let decrypted = decipher.update(encryptedBytes);// deciper encrypted bytes
decrypted = Buffer.concat([decrypted, decipher.final()]);

// This should give you a string with the session key and datetime stamp separated with a pipe
return decrypted.toString();

Is the process of encrypting / decrypting a sessionkey documented?

Daniel Brown — Tue, 30 Jan 2024 14:59:45 GMT

Hi Folks,

Thanks to input here, I'm stuck in to shared sessions. I've found it easy to request a shared session, and to get the contents of that shared session via the API.

My stumbling block is decryption of the encrypted session key - I'm having to use the tool in the Tessitura Admin to decrypt so that I can test.

I know there is a full code sample, but it's not in languages we are currently running on the server I am working on. Is there documentation somewhere of the steps required to encrypt and decrypt (decrypt is key really - I don't need to be able to encrypt I don't think)? I can get a bit of an idea in the PHP code, but my PHP isn't that good - my efforts today have been miss rather than hit and miss!

I'd welcome any input!

Thanks,

Dan

Importing MSA data

Lindsay Rogillio — Fri, 02 Feb 2024 14:05:26 GMT

Has anyone successfully imported MSA data? We'd like to use this data in segmentation in order to pull prospect lists based on an MSA region.

We were told we could import the data into the Geographic Areas (TR_GEO_AREA) table, and that there's a process that runs on the backend to tie the constituent's address to the MSA region.

What we've found it that the process has each key programmed line by line to update each address based on the zip code. So it appears to us we would have to update the table, then rewrite the whole process. Has anyone already done this and would be willing to walk us through how you did it? Or if you've found a more efficient way to write the process instead of programming line by line?

RE: Importing MSA data

Kirk McMahon — Fri, 02 Feb 2024 15:48:32 GMT

I think we've done something similar to what you're wanting. We have a number of custom regions we've added to TR_GEO_AREA (kind of similar to how you're wanting MSA regions). We then uploaded into our database a custom mapping table where we mapped a large list of 5-digit ZIP codes to these custom Geo Area values.

We then updated LP_UPDATE_GEOAREA to reference this mapping table to see if there's a match, which avoids having to hard-code individual ZIPs into that procedure.

DECLARE @mapping_area INT
SET @mapping_area = (SELECT geo_area FROM LTR_GEO_AREA_MAPPING WHERE zip_code = (substring(@postal_code, 1, 5)))

UPDATE t_address
SET geo_area =
CASE

...

WHEN country = 1 and @mapping_area IS NOT NULL THEN @mapping_area

...

END
WHERE address_no = @address_no

So possibly something like this could work for you. You can send me a message if you want more details.

RE: Is the process of encrypting / decrypting a sessionkey documented?

Daniel Brown — Thu, 01 Feb 2024 14:58:05 GMT

Hey DGomez, just to say thanks - I've used you JavaScript as the basis for a new webpage. My app sends a post request to this, the response being the decrypted string. This would be insecure if public facing, so the page is blocked to external access and can only be requested from within the server.

It's a bit hacky, but making use of native JavaScript saved installing a load of new encryption components on the server, so it's a quick solution for the rush I'm in now!

Thanks for everything you sent, it was really helpful - once the pressure is off in terms of launch date, I will use it to build a more elegant approach :)

RE: Is the process of encrypting / decrypting a sessionkey documented?

Daniel Brown — Wed, 31 Jan 2024 16:04:32 GMT

Thanks DGomez

That's the most broken down I've seen it, clear and really useful. I'm far more used to JavaScript so should find it easier to understand thanks to your decryption sample too.

I'm going to focus on everything else I have to do for launch first, and come back to this last - but I think this should give me a massive help!

Dan

RE: Is the process of encrypting / decrypting a sessionkey documented?

Daniel Gomez — Tue, 30 Jan 2024 16:58:48 GMT

Greetings, Daniel Brown! At True Tickets, we put together some documentation that we provide to our clients' custom website integrators that I think might help you out.

Also included is a web page utility (which uses native browser APIs) that you can use to test your encrypted session key to make sure it can be decrypted successfully.

Cheers,

DGomez

communitytest.tessitura.com/.../True-Tickets-_2D00_-Tessitura-Integration-_2D00_-Seamless-Authentication-Cookie-Requirements-_2D00_-2023_2D00_03_2D00_16.pdf

communitytest.tessitura.com/.../true_2D00_tickets_2D00_seamless_2D00_auth_2D00_cookie_2D00_decrypter.zip

Call an external HTML page from Constituent record

Daniel-Charles Ogar — Wed, 24 Jan 2024 20:58:09 GMT

Does anyone have any experience calling an external html page from with a constituent record that can be auto-populated with several constituent fields / IDs?

The Idea is to have an integration where a constituent record can have attributes passed to a third party application from within Tessitura upon an initiated event without having to manually enter values into another screen.

Where can i find the API URL and Access to code repository

Sankaran R — Fri, 15 Dec 2023 19:47:25 GMT

Hi I am new to tessitura, I have submitted my request for developer access. I want to find out from where i can get access to the API Url and also i need access to the bitbucket code repository for sample code. Thank you.

RE: Where can i find the API URL and Access to code repository

Julie Rosenthal — Fri, 05 Jan 2024 20:33:58 GMT

Sankaran R Hoping you got access to everything via your developer access request. If you are still looking for information, you might find it here, https://www.tessituranetwork.com/devs#dev-basics

RE: Is there an easy way to pull the subheader (.tn-utility-nav) bar into a clients none Tessi site?

Nathan Campbell — Thu, 07 Dec 2023 14:42:25 GMT

Hi Dan!

Take a look at the TNEW Shared Session information here - https://www.tessituranetwork.com/en/Files/Docs/TNEW/TNEW-Shared-Session-Overview

Note - this does not enable the exact use case of pulling TNEW content itself into your marketing site - rather, you'll have access to the TNEW / Tessitura SessionKey, which you can then use to get the cart or constituent information for display on the marketing site.

- Nathan

Is there an easy way to pull the subheader (.tn-utility-nav) bar into a clients none Tessi site?

Daniel Brown — Thu, 07 Dec 2023 10:29:54 GMT

It's been refreshingly easy to match up the look and feel of TNEW to our clients existing website.

Once we transition to Tessi, this website will be remaining as the brochure website. It will hand visitors over to TNEW for login, ticket purchasing, donations etc.

To take the consistency between the two sites one step further, is there an easy way to pull in the session specific HTML code for that block?

This way, if a visitor is logged in on TNEW and clicks back to the brochure site, they will still see that they are logged in, if they have something in their cart, it will show etc.

Thanks,

Dan

Payment date in HTML

Katie J. Toomey — Thu, 26 Oct 2023 16:14:44 GMT

Hello -

Is anyone out there using an order confirmation template which includes payment dates? Most of our orders contain multiple payments before being paid off entirely, whether it's a partial deposit on a program or a monthly payment plan.

https://www.tessituranetwork.com/Help_System/Content/Recipe%20Books/HTML%20Templates/Payments.htm

^ I'm looking for exactly what we see here, but just with the payment date included somewhere along with the last 4 digits and amount. I haven't had luck figuring this out myself, if someone has a code they could easily copy and paste?

Thank you!

RE: Payment date in HTML

Ryan Mauldin — Wed, 01 Nov 2023 19:19:35 GMT

Those are available on 15 (we're on 15 too still.)

If you're using multiple plans (our groups only ever have one, so I grab the first plan item), it should be pretty much the same as the example you referenced, except iterating over Model.OrderProductView.PaymentPlans instead of Payments. Something like, e.g.,

@foreach (var p in Model.OrderProductView.PaymentPlans)
{

<html tags> @p.AmountDue </html tags>

<html tags> @p.DateDue </html tags>

}

--and perhaps converting to and formatting strings as needed.

Also, I found it immensely helpful to explore the various response objects within OrderProductView when first acquainting myself (and continue to).

Cheers,

Ryan

RE: Prospective Donor Research Software? Is iWave the way to go?

Anna Stauber — Wed, 01 Nov 2023 16:34:22 GMT

Thank you, Colleen!

Prospective Donor Research Software? Is iWave the way to go?

Anna Stauber — Wed, 01 Nov 2023 16:01:43 GMT

We're running a capital campaign that has stalled out over the last year or so. We want to jumpstart using a prospective donor research tool. In the past (pre 2019) we've looked into iWave because it interacts with Tessitura, but wanted to see opinions - is this still an effective tool? Would you say iWave is the right product to use? Which do you use and what do you like/dislike about them?

Any and all information helps here! Thanks!

RE: Prospective Donor Research Software? Is iWave the way to go?

Anna Stauber — Wed, 01 Nov 2023 16:34:04 GMT

Thank you!

RE: Prospective Donor Research Software? Is iWave the way to go?

Colleen Miller — Wed, 01 Nov 2023 16:31:27 GMT

Hi Anna, as noted you may want to post this in the Fundraising and Development Community. That said, my organization uses iWave and I'm happy to talk with you about our experiences! Feel free to email me at cmiller@olneytheatre.org.

RE: Prospective Donor Research Software? Is iWave the way to go?

Heather Laidlaw Kraft (she/her) — Wed, 01 Nov 2023 16:21:17 GMT

Hi Anna -

This is the Developer (coding) forum, not the Development (fundraising) forum - you might have better luck posting there: https://community.tessituranetwork.com/tessitura_software_forums/f/tessitura_development-9

From a purely agnostic, technical standpoint, Tessitura does have three partners in the Wealth Screening ecosystem space: iWave, DonorSearch and WealthEngine. All of them are integrated to some level and all provide differing datasets and amounts of data and services, so definitely good to explore your options!

Best of luck in your prospecting,

Heather
Product Manager, Integrations

RE: Prospective Donor Research Software? Is iWave the way to go?

Mark Parker — Wed, 01 Nov 2023 16:12:32 GMT

Hi, Anna. We have a robust and longstanding integration with Tessitura and we'd be happy to share details and service options.

RE: Payment date in HTML

Katie J. Toomey — Tue, 31 Oct 2023 12:51:01 GMT

Hi Ryan, thank you! I am also interested in adding payment plan information to the template. I am still in v15 and wondering if this code for payment plans is something you'd mind sharing as well?

RE: Payment date in HTML

Ryan Mauldin — Thu, 26 Oct 2023 22:35:04 GMT

We only show payment due dates from order payment plans... but glancing at it, I believe you could get the order number and use that in a separate call to TXN/Payments?referenceId={referenceId}

Something like:

string paymentURL = "TXN/Payments?referenceId=" + orderNum;
var paymentResponse = Model.RestClient.AtUrl(planurl).WithContentType(ContentType.Json).Get<Payments>().ResponseObject;

That returns a payment datetime in the response.

The dynamic content example is useful.

Best,

Ryan

RE: Formatting of datetime custom keyword fields

John A. Moskal II — Mon, 08 May 2023 19:37:10 GMT

James,

I assume you are viewing in Tessitura on the Attribute tab/radio button. Given that the date is showing in date format, I would THINK the T_KEYWORD set-up is correct, however it never hurts to check. Our attribute date elements have both the "Data Type" and "Edit Mask" set to "Date"; presumably yours would as well.

I think the issue might lie in the data itself inserted into TX_CUST_KEYWORD. I cannot speak to the system as a whole, but I can confirm that all of our date attributes are date ONLY, no timestamp. So, given your example above, the entry in the "key_value" column of TX_CUST_KEYWORD would be "2023-05-02" with nothing else. At least, that seems to work for our date elements. If you really NEED the timestamp, I am not sure; maybe someone else knows more than I as to how one would format that, but if you are okay to abandon the timestamp, that should work.

Hope that helps,

John A. Moskal II

Formatting of datetime custom keyword fields

James Galley — Wed, 03 May 2023 14:18:39 GMT

Hello,

I'm experiencing an issue with the formatting of Datetime fields in custom attribute values stored in TX_CUST_KEYWORD and defined in T_KEYWORD.

We have a Local Procedure (LP) that writes a date into a TX_CUST_KEYWORD row, together with the customer_no and keyword_no.

When the Local Procedure runs it takes an XML payload containing a datetime like "2023-05-02 14:00:00" and inserts a new row into TX_CUST_KEYWORD. The LP then executes a SELECT statement which queries TX_CUST_KEYWORD to get the values that have just been written. The output of this query is a string such as "May 2 2023 2:00PM", which is the same date/time as was send to the LP. The LP date variable is configured as an SQL "datetime", although I'm not certain how the T_KEYWORD has been set up.

However when viewing the data from within Tessitura, we see the default date of "01/01/1990".

Could this be a configuration issue for the T_KEYWORD field, or perhaps a presentation issue where we need to configure some formatting for the visual output in Tessitura?

Any advice gratefully received.

Can the version 16 C# library be used on an ASP.Net 4.8 website?

Michael Drennan — Tue, 02 May 2023 22:37:37 GMT

Looks like the new Tessitura.Service.Client.dll needs a .NET runtime of 6.0. Most of my projects are fine except for a registration website using .NET Framework 4.8.

Will I be able to use the library - or rewrite the site as a .NET Core website?

Thanks!

Mike Drennan

The Tech Interactive