@moveo-ai/web-client 0.127.0-true.55 → 0.127.0-true.57

package/README.md

@@ -178,7 +178,7 @@ Initializes the chat widget.
 | `integrationId`      | `string`                                    | Yes      | Your Moveo.ai integration ID                                  |
 | `host`               | `string`                                    | No       | Regional channels host, when it differs from the default      |
 | `element`            | `HTMLElement \| string`                     | No       | Embed target, required for the `embed` widget position        |
-| `identityToken`      | `string`                                    | No       | Signed token that verifies the user's identity on the session |
+| `identityToken`      | `string \| () => string \| Promise<string>` | No       | Signed token that verifies the user's identity on the session. See [Identity token](#identity-token) |
 | `voiceIntegrationId` | `string`                                    | No       | Deprecated and ignored: the call uses the desk voice pairing  |
 | `variant`            | `'default' \| 'nbg' \| 'alpha' \| 'fiserv'` | No       | Visual variant                                                |
 
@@ -368,6 +368,37 @@ MoveoAI.init({
 });
 ```
 
+### Identity token
+
+An identity token is a JWT that your server signs to tell Moveo who the visitor is. Pass a function, not a fixed string, so the widget always gets the page's current token:
+
+```javascript
+MoveoAI.init({
+  integrationId: 'YOUR_INTEGRATION_ID',
+  identityToken: async () => {
+    const response = await fetch('/api/moveo-token', {
+      credentials: 'include',
+    });
+    if (response.status === 401) {
+      return ''; // The visitor is logged out.
+    }
+    if (!response.ok) {
+      throw new Error(`Token endpoint: ${response.status}`);
+    }
+    const { token } = await response.json();
+    return token;
+  },
+}).then((instance) => {
+  console.log('Moveo widget ready', instance);
+});
+```
+
+The function stays on your page. The widget calls it before each session create and each reconnect, and keeps no token between calls. So a short-lived token works for a long conversation, and a logout or an account switch takes effect at the next reconnect, also on a single-page app that does not reload.
+
+- Return `''` when the visitor is logged out. If the integration requires an identity token, channels then refuses the reconnect, and the visitor starts a new conversation.
+- Mint a new token on each call. Channels refuses a token without `exp`, or with an `exp` more than 24 hours ahead.
+- If the function throws, returns no string, or takes more than 10 seconds, the widget calls it again after 1 second and after 2 more seconds. If every call fails, the widget continues without a token.
+
 ### Teaser
 
 The teaser is the invitation shown beside the closed launcher. `variant` picks

package/dist/752.min.js.LICENSE.txt

@@ -1,6 +1,6 @@
 /*!
  * 
- *   @moveo-ai/web-client v0.127.0-true.55
+ *   @moveo-ai/web-client v0.127.0-true.57
  *   Copyright (c) Moveo.ai (TM)
  *
  */

package/dist/882.min.js.LICENSE.txt

@@ -1,6 +1,6 @@
 /*!
  * 
- *   @moveo-ai/web-client v0.127.0-true.55
+ *   @moveo-ai/web-client v0.127.0-true.57
  *   Copyright (c) Moveo.ai (TM)
  *
  */

package/dist/929.min.js.LICENSE.txt

@@ -1,6 +1,6 @@
 /*!
  * 
- *   @moveo-ai/web-client v0.127.0-true.55
+ *   @moveo-ai/web-client v0.127.0-true.57
  *   Copyright (c) Moveo.ai (TM)
  *
  */