Subnav Links

POST /api/platform/entitylists/subnavlinks@mozu/entities

{
    "path": [
        "Parent",
        "Child"
    ],
    "href": "{{your URL here}}",
    "windowTitle": "Custom Interface",
    "modalWindowTitle": "Subnav Link Title",
    "location": "ordermenu",
    "displayMode": "modal",
    "appId": "{{application ID}}",
    "badgeInitials": "CT",
    "requiredContext": "products"
}

const crypto = require("crypto");

var appKey       = "YOUR.APP.KEY";
var appSecret    = "{{appSecret}}";      // From your app credentials
var receivedHash = "{{messageHash}}";    // From query param
var receivedDate = "{{dt}}";             // From query param
var rawContent   = "{{postBody}}";       // Raw POST body string

// Step 1: Concatenate the app secret with itself
var concatenated1 = appSecret + appSecret;

// Step 2: SHA-256 hash the concatenated secret, then Base64-encode it
var hash1 = crypto.createHash("sha256").update(concatenated1).digest("base64");

// Step 3: Concatenate hash1 + receivedDate + rawPostBody
var concatenated2 = hash1 + receivedDate + rawContent;

// Step 4: SHA-256 hash the second concatenation, then Base64-encode it
var generatedHash = crypto.createHash("sha256").update(concatenated2).digest("base64");

// Step 5: Compare — matching means the request is authentic
if (generatedHash === receivedHash) {
    console.log("Match! Request is authentic.");
}

GET /api/platform/entitylists/subnavlinks@mozu/entities