npm install @journeybee/embed

// Node backend — e.g. an Express / Next.js API route
import jwt from "jsonwebtoken";
import { randomUUID } from "node:crypto";

const EMBED_SIGNING_SECRET = process.env.JOURNEYBEE_EMBED_SECRET!; // jb_embed_…
const COMPANY = "YOUR_COMPANY_ID"; // your public company id (companies.uuid)

export function mintPortalEmbedToken(user: { email: string }) {
  const now = Math.floor(Date.now() / 1000);
  return jwt.sign(
    {
      iss: COMPANY,    // issuer — your public company id (companies.uuid)
      sub: user.email, // the user to sign in (an existing portal user, or JIT)
      aud: COMPANY,    // audience — same id; binds the token to this tenant
      // partnership_uuid: "…", // optional explicit partnership target (JIT)
      iat: now,
      exp: now + 60,   // short-lived — the portal enforces exp ≤ iat + 120s
      jti: randomUUID(), // unique — single-use, replays are rejected
    },
    EMBED_SIGNING_SECRET,
    { algorithm: "HS256" },
  );
}

import { createPortalEmbed } from "@journeybee/embed";

// Fetch a token from YOUR backend (above). Never mint it in the browser.
const token = await fetch("/api/portal-embed-token", { method: "POST" }).then(
  (r) => r.text(),
);

const embed = createPortalEmbed({
  target: "#portal",                  // element or selector to mount into
  portalHost: "portals.journeybee.io", // where the portal is served (or your custom domain)
  company: "YOUR_COMPANY_ID",         // your public company id (companies.uuid)
  token,                              // exchanged for a session on first load
});

embed.on("portal:navigate", (msg) => console.log("navigated to", msg.path));

// Later, to tear it down:
// embed.destroy();

createPortalEmbed(options): PortalEmbed

import { createPortalEmbed, type PortalEmbed } from "@journeybee/embed";
import { useEffect, useRef } from "react";

export function PartnerPortal() {
  const ref = useRef<HTMLDivElement>(null);

  useEffect(() => {
    let embed: PortalEmbed | undefined;
    let cancelled = false;

    (async () => {
      const token = await fetch("/api/portal-embed-token", {
        method: "POST",
      }).then((r) => r.text());
      if (cancelled || !ref.current) return;
      embed = createPortalEmbed({
        target: ref.current,
        portalHost: "portals.journeybee.io",
        company: "YOUR_COMPANY_ID",
        token,
      });
    })();

    return () => {
      cancelled = true;
      embed?.destroy();
    };
  }, []);

  return <div ref={ref} />;
}

embed.on("portal:authRequired", async () => {
  const token = await fetch("/api/portal-embed-token", { method: "POST" }).then(
    (r) => r.text(),
  );
  embed.destroy();
  embed = createPortalEmbed({ target: "#portal", portalHost, company, token });
});