Instructions

Enter the URL to open in the text box below and click on submit. The application portal will then open the web page in an iFrame.

The application portal will communicate with the application via event messages. All messages must contain two properties. The first property is the action property which identifies the type of message being transmitted. The second property is the source property which identifies from where the message is being transmitted. The application portal will identify itself as "Bolt" in the source property.

Once application portal opens the web page it will wait for the application to send the "ready" message indicating that the application is ready for communication with the application portal. Once the "ready" message is received the application portal will send a "login" message with the IdToken. If at any time the application portal needs to refresh tokens it will send a "refresh" message to the application with the new token.

The application should validate the token, the user identified in the token, and the validity of the timestamp. The application should also logout or prevent user access if the token expires and has not been refreshed.

            $(function onDocReady() {
              var token = false;
              window.addEventListener("message", function(event){
                if (event.data.action === 'login') {
                  // Save the token and take action to login into the application
                  token = event.data.idToken;
                  ⋮
                }
                if (event.data.action === 'refresh') {
                  // Save the token
                  token = event.data.idToken;
                }
              });
              window.parent.postMessage({ action: "ready", source: "MyApplication" }, '*');
            });