TidyAnswer Help Center

Secure Messenger visitor identity with JWT

Prevent visitors from impersonating other signed-in users in a trusted application.

Steps

  1. Enable Messenger identity enforcement in TidyAnswer.
  2. Have your backend sign the short-lived messenger user JWT; never sign it in browser or mobile client code.
  3. Provide the token through the Messenger SDK JWT provider and refresh it before expiry.
  4. Test sign-in, sign-out, account switching, and expired-token recovery.

Important notes

  • The signing secret belongs only on your backend. Do not place it in JavaScript, a mobile bundle, logs, or analytics.

If you still need help

Search this Help Center using the exact feature or visible error. If the issue continues, use Call TidyAnswer support from the Help Center navigation. Include any public reference and the approximate timestamp, but never include passwords, access tokens, provider credentials, or raw webhook payloads.