The support widget the caller is shown, or NULL when they are shown none: the deployment has no messenger, or the…

The support widget the caller is shown, or NULL when they are shown none: the deployment has no messenger, or the organisation shows the widget to nobody or only to roles the caller does not hold. When the organisation uses its own helpdesk the answer is that widget instead — provider, script_url, site_key, and the caller’s name and email only if the organisation chose to share them. Otherwise it is the product messenger’s workspace and the caller’s verified identity in it. The user hash is an HMAC over the user id, keyed with a secret no client can read, which is what stops a browser claiming to be somebody else.