PackAuth™ widgets

An embed of one step of the packaging lifecycle. A widget never receives a tenant API key — it receives a short-lived token, minted server-side, scoped to one object and one set of origins.

Mint a token

POST https://api.packauth.com/v1/widget-tokens
{ "widget_id": "release-check",
  "object_type": "print_release",
  "object_id": "rel_...",
  "origins": ["https://shop.example.test"] }

Embed it

<script src="https://widgets.packauth.com/v1/release-check.js"
        data-token="pw_..." async></script>

Available

• release-check — Whether a print release is live, the markets it covers, and the artwork hash it was issued for.
• manifest-status — The manifest's lifecycle state and how many blocking and major findings are open.

Full reference at dev.packauth.com.