Web integration

Browser integration uses the same iframe and mobile approval. After sign-in, your backend either keeps the profile from postMessage or exchanges it for a session cookie via kie-la-auth.js.

Choose your pattern

Profile handoff

Login iframe on action. Profile in postMessage — no platform session cookie. Ref: kresto-style flows.

Profile handoff →

Session portal

Splash + home, kie-la-auth.js, session cookie, /api/me. Ref: lab application.

Session portal →

Comparison

Pattern Mobile approval Login iframe Session cookie Reference
Profile handoff Accept / reject on the Kie.la app On user action None (your app session) restaurant.example.com
Session portal Accept / reject on the Kie.la app On load / header Yes (HttpOnly, set by Kie.la) lab.example.com (lab application)

The Understand page demonstrates web integration with different authUi embed styles.