01 / Build the connection
Embed the game
Open a game inside your platform with a server-signed session token.
A game opens in an iframe using a JWT issued by your backend. Build the launch URL for the assigned game, then connect the frame to the surrounding player experience.
Getting the Token
Before embedding the game, you need to obtain a JWT token from your own backend:
- Call your backend endpoint with proper authentication (user session, API key, etc.)
- Your backend generates the JWT token using the process described in Token Generation
- Use the returned token in the iframe URL
Basic Iframe Structure
<iframe src="https://games.wildvoltgames.com/{game_id}?token={JWT_TOKEN}"></iframe>Replace:
{game_id}with the specific game identifier{JWT_TOKEN}with the token obtained from your backend
Demo Mode
To show the demo version of a game without authentication:
<iframe src="https://games.wildvoltgames.com/{game_id}?demo=true"></iframe>When demo=true is included as a query parameter:
- No JWT token is required
- The game runs in demo mode with virtual credits
- No real money transactions occur
- Perfect for testing or showcasing games to users
Recommended Configuration
Real Money Mode
<iframe
src="https://games.wildvoltgames.com/{game_id}?token={token}"
width="100%"
height="600"
frameborder="0"
allowfullscreen>
</iframe>Demo Mode
<iframe
src="https://games.wildvoltgames.com/{game_id}?demo=true"
width="100%"
height="600"
frameborder="0"
allowfullscreen>
</iframe>Responsive Design
For responsive layouts, use CSS:
.game-container {
position: relative;
width: 100%;
height: 0;
padding-bottom: 56.25%; /* 16:9 aspect ratio */
}
.game-container iframe {
position: absolute;
top: 0;
left: 0;
width: 100%;
height: 100%;
}Environments
Wildvolt Games operates in two environments:
| Environment | Base URL |
|---|---|
| Production | https://games.wildvoltgames.com |
| Staging | https://games-staging.wildvoltgames.com |
Use staging for development and testing, production for live operations.
Security Notes
- Keep signing keys on your server. The short-lived launch token must reach the player’s browser, but must not be logged, shared with other players, or embedded in analytics.
- Validate user sessions before requesting tokens from your backend
- Set appropriate iframe sandbox attributes if needed for additional security
- Use HTTPS for all iframe sources