",
// User segment field (Tier1–Tier20 only，must match Settings → User identity)
tier: "Tier3",
// Custom identity fields (keys must match admin configuration)
custom_field_key_1: "value1",
custom_field_key_2: "value2"
}
}
```
JWTs must be signed with your **User identification secret key** (HS256).
A JWT must include:
* Header(Fixed): `{ "alg": "HS256", "typ": "JWT" }`
* Payload: `sub` , `exp`, and `user` fields
**JWTs must be generated server-side.** Never expose your secret key in frontend code.
{% endstep %}
{% step %}
**Step 3: Pass userToken in the Boot Call**
You just need add one field to the standard popup or fullpage install.
{% tabs %}
{% tab title="Popup mode" %}
CustomerSupportWidget("boot", {
workspaceId: "YOUR-WORKSPACE-ID",
mode: "popup",
userToken: "<SIGNED-JWT>",
});
{% endtab %}
{% tab title="fullpage mode" %}
```js
CustomerSupportWidget("boot", {
workspaceId: "YOUR-WORKSPACE-ID",
mode: "newPage",
userToken: "",
});
```
{% endtab %}
{% endtabs %}
**（Sunset）**~~**Send Token After Boot**~~
~~If the visitor logs in after the widget has already been booted, you can attach identity later using `setUserToken`.~~
{% hint style="info" icon="xmark-large" %}
~~This method ony works for popup mode. Not for fullpage mode.~~
{% endhint %}
```js
CustomerSupportWidget("setUserToken", "");
```
{% endstep %}
{% step %}
**(Optional) Pass userToken via Direct Link**
You may pass a signed token via URL:
```
https://your-customer-site.com/chat?workspaceId=&userToken=
```
On initialization, we will
1. Detect userToken in URL
2. Validate JWT
3. Bind identity as Verified
4. Remove token from URL (without reload)
{% endstep %}
{% step %}
**Step 4: Reset the Widget Session (Required on Logout)**
When a user logs out or switches accounts, you must reset the widget session to prevent cross-user identity leakage.
{% hint style="info" icon="xmark-large" %}
This method ony works for popup mode. Not for fullpage mode.
{% endhint %}
```js
CustomerSupportWidget("reset");
```
**What reset does**
* Ends the active chat (if any)
* Clears stored identity and attributes
* Starts a new anonymous visitor session
{% endstep %}
{% endstepper %}
#### For Guest Users (No Verification)
{% hint style="info" icon="xmark-large" %}
This method ony works for popup mode. Not for fullpage mode.
{% endhint %}
**Pass attributes**
If you don’t need identity verification, you can still pass attributes:
{% tabs %}
{% tab title="Pass userToken in the Boot Call" %}
```js
CustomerSupportWidget("boot", {
workspaceId: "YOUR-WORKSPACE-ID",
mode: "popup",
userAttributes: {
// Built-in identity fields (must match Settings → User identity)
name: "",
email: "",
// User segment field (Tier1–Tier5 only，must match Settings → User identity)
tier: "Tier3",
// Custom identity fields (keys must match admin configuration)
custom_field_key_1: "value1",
custom_field_key_2: "value2"
}
});
```
{% endtab %}
{% tab title="Send Token After Boot" %}
```js
CustomerSupportWidget("setUserAttributes", {
// Built-in identity fields (must match Settings → User identity)
name: "",
email: "",
// User segment field (Tier1–Tier5 only，must match Settings → User identity)
tier: "Tier3",
// Custom identity fields (keys must match admin configuration)
custom_field_key_1: "value1",
custom_field_key_2: "value2",
});
```
{% endtab %}
{% endtabs %}
These attributes will be treated as Unverified.
**(Sunset) **~~**Merge vs Replace**~~
> ~~Only work for Guest Users~~
~~By default, Kino **merges** attributes if you call setUserAttributes several times~~
~~Example (merge mode):~~
```js
// Current stored attributes:
// { name: "Jane", email: "jane@acme.com", tier: "Tier3", region: "EU" }
// Update
CustomerSupportWidget("setUserAttributes", {
tier: "Tier5",
});
// Result (region is kept):
// { name: "Jane", email: "jane@acme.com", tier: "Tier5", region: "EU" }
```
~~If you want to **replace** the attributes, you need to set the mode as replace.~~
```js
CustomerSupportWidget(
"setUserAttributes",
{
name: "New Name",
},
{ mode: "replace" },
);
```
~~Example (replace mode):~~
```js
// Current stored attributes:
// { name: "Jane", email: "jane@acme.com", tier: "Tier3", region: "EU" }
// Update
CustomerSupportWidget(
"setUserAttributes",
{
name: "Jane",
tier: "Tier1",
},
{ mode: "replace" },
);
// Result (email and region are removed):
// { name: "Jane", tier: "Tier1" }
```
