Skip to main content

Single sign-on from a connected store (widget)

POST 
/api/widget/auth/sso

PUBLIC endpoint. Exchanges a SIGNED token from the store's plugin (a logged-in store user) for an authenticated widget session — no separate chat login. The token is base64url(payload).base64url(hmac_sha256(payload, sso_secret)) with payload \{sub, email, name, iat\}; it is HMAC-verified against the connection's sso_secret + a freshness window. A bad/expired token is a single generic 422.

Request​

Responses​

Logged in via SSO; an authenticated session is returned.