January 2023 Release

Production Release Date: January 25

New OAuth Security

As part of ongoing security improvements, we've updated two of our OAuth Client scopes to require a specific token type. Any access tokens with a gamification_user scope require a 3-legged token and any tokens with a global scope require a 2-legged token.

A token will fail on creation if an unsupported token type is set. This security will be enforced on the following dates:

• Sandbox - January 11th

• Production - January 25th

Product Enhancements

Data Import BETA Release

Our new data import is now available for beta testing in Sandbox! This feature allows you to upload user preferences, actions, award account enrollment, group enrollment, points credits, and points debits in Nitro Studio for batch processing. Data import uses our batch import technology to process files without requiring an SFTP server.

Contact Bunchball Support if you're interested in beta testing data import.

Recognitions Web Component

The Recognitions web component has been updated with a new design that includes the category's acceptable point range.

Default Level Action Phrase

Nitro's system default action phrase was removed for all levels. If you don't set an action phrase on a level in Nitro Studio, no event will be shown in the Events web component when a user moves up a level.

OAuth Client Scopes

OAuth Client scopes have been modified for new and deprecated APIs.

• gamification_user - Modified to include users/point-balance.read and users/point-transactions.read.

• users/self-reported-rules - New scope for full access to the user's self-reported rules.

• users/points - Deprecated. Use users/point-balance.

• users/points.read - Deprecated. Use users/point-balance.read.

• users/points.write - Deprecated. Use users/point-balance.write.

• users/points-history.read - Deprecated. Use users/point-transactions.read.

• users/points-history.write - Deprecated. Use users/point-transactions.write.

• users/point-transactions - New scope for full access to the user's point transactions.

• users/point-transactions.read - New scope for read access to the user's point transactions.

• users/point-transactions.write - New scope for write access to the user's point transactions.

• users/point-balance - New scope for full access to the user's point balance.

• users/point-balance.read - New scope for read access to the user's point balance.

• users/point-balance.write - New scope for write access to the user's point balance.

• uploadURLs/data-import.read - New scope for read access to the API endpoint to retrieve presigned URLs.

• batch-import - Modified for read/write access to data import and batch import data. Required scope for data import. The name of the OAuth Client must be batch-import.

Product Fixes

• Fixed an issue where the Mission builder Rewards tile did not show updated information after editing a segmented reward.

• Fixed an issue where a mission's rule with blank metadata was not updating correctly after the metadata was edited.

• Fixed an issue where a mission with a legacy ruleset was opening in the Mission builder instead of the legacy Challenge builder.

• Fixed an issue where some text in the Missions web component did not translate into a different language.

• Fixed an issue where bill codes were not sent to the account team with On-The-Sport Card redemptions.

Documentation Updates

• Moved file requirements for batch loading data to its own page and added general requirements for data import.

• Updated the localization translation key and examples for text in the Missions web component.

See also

Release Notes