Chat & Widget

<script>
  // Called by the widget whenever it needs a (fresh) token.
  window.NOXUS_EMBED_TOKEN_PROVIDER = async () => {
    const res = await fetch("/my-backend/noxus-widget-token");
    const { token } = await res.json();
    return token; // a signed JWT
  };
</script>
<!-- ...then the Noxus embed snippet... -->

POST /api/public/embed/session/revoke
Content-Type: application/json
x-embed-token: <jwt for the user to revoke>

{ "deployment_id": "YOUR_DEPLOYMENT_ID" }

<script>
  function getNoxusToken() {
    return new Promise((resolve, reject) => {
      const noxus = "https://app.noxus.ai";
      const popup = window.open(
        `${noxus}/embed/authorize?deployment_id=YOUR_DEPLOYMENT_ID&origin=${encodeURIComponent(location.origin)}`,
        "noxus_auth",
        "width=480,height=640"
      );
      window.addEventListener("message", function onMsg(e) {
        if (e.origin !== noxus || e.data?.type !== "noxus_embed_token") return;
        window.removeEventListener("message", onMsg);
        e.data.error ? reject(new Error(e.data.error)) : resolve(e.data.access_token);
      });
    });
  }
  window.NOXUS_EMBED_TOKEN_PROVIDER = getNoxusToken; // widget calls it on demand
</script>

POST /api/backend/clients/{client_id}/revoke
POST /api/backend/clients/revoke-all

// Using the embed.js script:
window.SpotChatWidget.setContext({ objectType: "Case", recordId: "500X", title: "Login fails on SSO" });

// Pass null to clear it:
window.SpotChatWidget.setContext(null);

// Or, if you embed the iframe yourself, post the message directly:
iframe.contentWindow.postMessage(
  { type: "SPOT_WIDGET_CONTEXT", context: { /* any JSON or string */ } },
  "*"
);