Bring games into your site

The player stays on your site while the game runs inside an iframe. Your backend creates the session; the browser receives the launch URL and handles the supported messages around the game.

From a play button to a game

1. Confirm that the player is signed in to your platform.
2. Request a game session from your backend.
3. Create the JWT with the player and instance details described in Create a player session.
4. Set the iframe source to the assigned game URL with that token.
5. Wire the supported incoming and outgoing messages for that game release.

Implement the browser side

Protect the boundary

Generate tokens on your server after validating the player session. Validate the origin, source and shape of browser messages before using their data. Message availability depends on the supplied game client and release; use the contract assigned to your integration.