Types
EmbedToken
A short-lived signed JWT that an embed iframe can pass to a customer’s backend for
verification against the Plain-hosted JWKS at jwksUrl.
object
EmbedTokenFields
token
String!
The signed RS256 JWT. Pass this value to your backend and verify it against the JWKS at jwksUrl.
expiresAt
The time at which the token expires. Tokens have a 60-second TTL; mint a fresh token for each request.
jwksUrl
String!
URL of the Plain-hosted JWKS endpoint. Fetch the public keys from this URL to verify the token signature.