Your customers want surveys in your product. You don’t want to build a survey builder.

1. Step 1

   Your server signs a session

   When someone opens the surveys page, your backend asks ResponseDock for a five-minute embed URL with the account, the person, and what they may do. The secret key never reaches the browser.

   server/surveys.ts

   const res = await fetch('https://api.responsedock.com/api/v1/auth/embed-token', {
     method: 'POST',
     headers: {
       Authorization: `Bearer ${process.env.RESPONSEDOCK_SECRET_KEY}`,
       'Content-Type': 'application/json',
     },
     body: JSON.stringify({
       workspaceId: process.env.RESPONSEDOCK_WORKSPACE_ID,
       role: 'admin',
       mode: 'workspace',
       allowedOrigin: 'https://app.yourplatform.com',
       tenant: { id: account.id, name: account.name },
       user: { id: user.id, name: user.name },
       capabilities: ['questionnaire:create', 'questionnaire:edit',
         'questionnaire:publish', 'results:view'],
       subject: { type: 'account', id: account.id, label: account.name },
       theme, // parsed from your version-controlled theme file
     }),
   });
   const { embedUrl } = await res.json(); // { token, expiresIn: 300, embedUrl }

2. Step 2

   Your page renders the iframe

   Load the returned URL in an iframe. It sizes itself to its content through a resize message, so your page keeps control of scrolling.

   surveys.html

   <iframe id="surveys" src="EMBED_URL_FROM_YOUR_SERVER"
     title="Surveys" style="width:100%;border:0" allow="clipboard-write"></iframe>
   <script>
     const frame = document.getElementById('surveys');
     window.addEventListener('message', (event) => {
       if (event.origin !== 'https://app.responsedock.com'
         || event.source !== frame.contentWindow) return;
       if (event.data?.type === 'responsedock.lifecycle.resize') {
         frame.style.height = event.data.payload.height + 'px';
       }
     });
   </script>

3. Step 3

   You keep track of what they create

   Store the IDs of new questionnaires against the account. When people should answer, request a respondent embed with their user ID and the surveys they may see.

   surveys.html

   if (event.data?.type === 'responsedock.questionnaire.created') {
     saveSurvey(accountId, event.data.questionnaire.id);
   }
   
   // Later, for someone who should answer (server side):
   // { role: 'respondent', allowedSurveyIds: [surveyId],
   //   externalUserId: member.id, allowedOrigin, workspaceId }

Read the embedding guide →