hi. @paul-winterhalder @johnh Recently, security-related issues have become an ongoing concern within our company. In this era of AI, we are facing persistent security challenges, such as intrusions into our internal network and the theft of keys belonging to remote workers. I believe this is a matter that can no longer be deferred. API keys must be assigned specific permission scopes. While the current IP range configuration may have been designed with only servers in mind, it becomes highly impractical when developing internal web admin tools that rely on server-to-server (S2S) keys—as it would require registering the individual IP addresses of every staff member, which is simply not a viable solution. Please take this issue into consideration.

@paul-winterhalder I will explain in detail using the widget.

Yes that was it, thanks. I think it's a bit silly that this is even an option you can turn off, though.

To clarify, the API call returns 200. The error comes from our Cloud Code validation because score is undefined. During MCP execution, getGlobalLeaderboardPageByVersion() returns entries containing bestScore and otherData, while score, data, and rank are missing. The same script works in Portal Run and Debug—the issue is the differing response structure.

Awesome - great to hear!

opened Case 15301

@JasonL It works! Thank you!

Thank you! That was a huge help.

Is there no solution for this issue? Sending PDFs via email is very inconvenient. I would appreciate it if you could raise its priority.

We've deployed the patch for this. Apologies for the delay!

Case 14697

Awesome. Thanks for confirming @lee-jong-gun !

Cool - glad you found it!

Thank you!

Hi @jongdae.won , brainCloud 6.0.1 has been deployed. The Campaign Analytics feature - as well as the APIs for updating the campaign and scenario JSON, are now live! Paul.

Thanks for letting us know and your own solutions! We'll see if we can patch this into the JsonFx library we're using for future versions of brainCloud to avoid these edge cases.

Created case 14475

Hi, Apologies for the slow response. We don't have any calls that could directly handle a "file" of profileIds. We do have a few "toBatch" calls that are callable from S2S though - so you could probably have an offboard system make those calls - and call braincloud to send the notifications in batches. Where are these profileIds coming from? An offboard analytics system of some sort? To answer your questions: We are planning a revamp of our notifications system and it's APIs. I'll add this conversation so that it will be considered as we're planning that. As mentioned above, using one of the "Batch" calls would make the most sense - and keep your API counts reasonable There's an API call to call the SendRichPushNotificationWithParams, plus a second api call for the sending the push notification itself. So that would be <numReceivers> x 2 for API costs. Less if called from within a script. But the *Batch() calls would be Substitutions and custom metadata/custom data - the current APIs don't - so you'd probably need to handle those client side. Are the substitutions highly personal - like player's name? I hope that helps to clarify things, Paul.

Hi @moondory77 , We hear you - and are looking to see what options we can provide. The thing to understand is that there are a lot of dependencies between metadata in the brainCloud system - and our deployment mechanisms work hard to ensure the integrity of the data that gets pushed. Even more importantly - it works to prevent user data from being corrupted by a mis-match of data during deployments - which is why apps are very temporarily disabled during a deployment. These deployments normally take well under a minute and aren't much more troublesome than a common wifi interruption for clients [depends upon the client implementation though]... (note - the deployment may seem like it takes longer on the web - as there is a lot of data dependency checking to do - but all of that is done BEFORE we disable the app... which happens just for the actually data migration activity itself). If you contact us via the support chat with your appId and the time you last did a deployment - we can take a look to see if your deployment times are above normal. Also - we are working to provide a separate custom entity deployment mechanism - similar to what has been done for item management. Paul.

Unfortunately, our notification templating system is very simple and currently only supports simple text notifications. It does not currently push a template id. We do have plans to revamp the system on our "to-do" list - but it has not been scheduled yet. We recommend folks use the "raw" template calls - they give devs the most control over what gets sent to the various notification systems. Paul.