Identity signing

// 1. Browser: send the widget's visitor ID to your server with the logged-in user
const visitorId = localStorage.getItem("tars_anonymous_id")

// 2. Server: sign the visitor's details
import crypto from "node:crypto"

const payload = Buffer.from(JSON.stringify({
  iat: Date.now(),
  sub: visitorId,
  email: user.email,
  name: user.name
})).toString("base64")

const sig = crypto
  .createHmac("sha256", process.env.TARS_IDENTITY_SECRET)
  .update(payload)
  .digest("base64")

// 3. Browser: pass the signature to the widget
window.TarsWidget.identify({ kid: "YOUR_KEY_ID", payload, sig })