Embedded Analytics - Authentication

We use JWT (JSON Web Token) as a mechanism of user authentication. This is how it works:

• When a customer visits your app that needs embedding Holistics, your backend will take the customer ID and generate a token based on the secret key above.
• You then render an iframe pointing to the embed link, with the token baked into it.
• Holistics then use this token to authenticate and figure out which Customer is logging in, and display your dashboard with only that customer's data.

You are required to issue an encrypted token for your customer. The token is for us to:

• Correctly identify which of your customers is viewing the dashboard.
• Prevent your customers from faking their identity by simply changing the parameters inside the URL.
• Expire the token after a specified period of time.