Customizing the appearance of iframe

Copy

• Copy for LLM

  Copy page as Markdown for LLMs
• View as Markdown

  Open this page as Markdown
• Open in ChatGPT

  Get insights from ChatGPT
• Open in Claude

  Get insights from Claude
• Connect to Cursor

  Install MCP server on Cursor
• Connect to VS Code

  Install MCP server on VS Code

You can customize the branding and appearance of the Spotnana platform on your webpage. Administrators can use the platform branding customization document to add custom branding.

Security considerations

Here are some important points to keep in mind while implementing the iframe integration:

1. Origin validation: Spotnana validates the origin of incoming postMessage events. Your domain must be whitelisted by Spotnana before the integration can work. For local development and testing, the localhost:3000 URL is permitted by default.
2. Credentials security: Never expose your client ID or client secret in your codebase. All token exchange requests must go through your backend systems.
3. Secure token handling: Store tokens securely on your backend. Only pass tokens to the frontend when responding to a TOKEN_EXCHANGE_REQUEST from the iframe.