NavoChatChannels
Integrate external visitor login
Issue a short-lived JWT from your backend so a web channel can recognize signed-in customers.
Updated 2026-07-24For: Backend developers · Security owners
External login maps your user identity to a NavoChat customer. The shared secret must remain on your backend and must never be shipped to a browser or app.
Steps
Choose an authentication mode
In web channel security, select Identify signed-in users automatically or Require sign-in before chat.
Save identity settings
Configure the issuer and audience, then generate or save the HS256 shared secret.
Issue the JWT on your backend
Use a stable user ID, short expiration, and matching issuer and audience. Include name, email, or phone only when needed.
Pass the token to the widget
Your signed-in page requests a token from your backend and passes it through the supported widget initialization method.
Verify identity
Start a conversation with a test account and confirm that the customer matches the business user. Expired or invalid tokens must be rejected.