Developer cookbooks

13 recipes to integrate CodeB in an afternoon.

Task-oriented developer guides — every recipe is copy-paste-ready, tested against a real CodeB tenant, and honest about what ships today. Sign in with OIDC or the European Digital Identity Wallet, embed calling and chat, verify webhooks, stream events, forward audit trails to your SIEM. Pick the one you need.

13
Cookbooks shipped
50+
Snippets across languages
EU
Data residency, self-hosted
0
Hyperscaler dependencies
01 / Identity & sign-in

Wire CodeB into your login story.

Add OIDC sign-in, validate the tokens yourself, federate to the IAM broker your enterprise already runs, or automate everything from a backend with M2M keys. All four flows are RFC-compliant and PKCE-first.

Sign in with OIDC

Authorization-code + PKCE (S256) against the CodeB discovery document. Ready-to-paste snippets for Vanilla JS, React, Angular, Vue 3, Node/Express, Python/Flask, PHP and ASP.NET Core.

8 frameworks Open cookbook →

Validate JWTs locally

Fetch the JWKS, verify RS256 signatures, check issuer / audience / expiry — without a callback to CodeB. Snippets for Node.js, Python, Go, Java, .NET, PHP and Ruby.

7 languages Open cookbook →

Federate IAM

Drop CodeB in as an upstream OpenID Connect Identity Provider for Keycloak, Auth0, Okta, Microsoft Entra ID or AWS Cognito — configuration only, no custom code.

5 brokers Open cookbook →

M2M API keys

Server-to-server automation with rotating API keys. HMAC-signed requests, tenant-scoped, revocable in one click. Includes rotation playbook and least-privilege scope guidance.

Backend automation Open cookbook →
02 / European Digital Identity Wallet

Accept EU Wallet sign-in in your app.

The CodeB verifier speaks OpenID4VP 1.0 and HAIP 1.0 today. Accept SD-JWT VC and mDoc presentations, ECDH-ES JWE-encrypted responses, DCQL queries, JAR request objects. The two guides below cover the copy-paste path plus the full ecosystem — verifier, issuer, wallet, trust anchor.

Accept EU Wallet sign-in

OpenID4VP verifier integration for Vanilla JS, React, Angular, Vue, Node/Express and Python/Flask. Renders the QR, polls for the wallet response, exchanges for a tenant session token.

6 frameworks · OID4VP Open cookbook →

EU Wallet ecosystem

The bigger picture: how CodeB fits alongside the reference EU Wallet, HAIP verifier certification, EU LOTL trust-anchor cache and the OpenID4VCI credential issuer. Cross-links every wallet page in one map.

Verifier · issuer · wallet · trust anchor Open cookbook →
03 / Embed comms

Put calling, chat and meetings on any page.

Three lightweight embeds. The softphone is a full SIP-over-WebSocket iframe. The chat widget is a floating “Chat with us” button that opens a tenant-hosted room. The meet embed is a click-to-conference launcher. All three are drop-in, no NPM required.

Embed softphone

Iframe the CodeB SoftPhone into any tenant page or third-party site. Sandboxed, tenant-scoped, SIP-over-WebSocket. Includes CSP hardening and per-user OIDC gating recipes.

SIP-over-WebSocket iframe Open cookbook →

Embed chat widget

Chat-with-us button that opens a per-visitor tenant chat room. Per-domain allow-list. Guest sessions issued via HMAC invitation. Anonymous visitors are OIDC-invited only.

Chat-with-us on any site Open cookbook →

Embed meet room

Click-to-conference button that spins up a signed room and drops the visitor into a browser meeting. QR + shareable URL. Personal-name pre-fill honoured only for explicit personal links.

Click-to-conference button Open cookbook →
04 / Data & operations

Stream events, archive artefacts, forward audit trails.

Once CodeB is live you will want to react to it. Verify webhook signatures, subscribe to the real-time signalling WebSocket, snapshot recordings and transcripts into your own storage, and forward the audit trail into Splunk, Elastic, Datadog, Loki or Microsoft Sentinel.

Receive webhooks

HMAC-SHA256 signature verification, replay-window enforcement, idempotency-key handling. Snippets for Node/Express, Python/Flask, Go, PHP and ASP.NET Core.

HMAC-verify in 5 stacks Open cookbook →

Real-time WS events

Signal WebSocket consumer patterns — auto-reconnect, backoff, message filtering, per-tenant scope. Track calls, chat messages, presence and admin events without polling REST.

Signal WebSocket consumers Open cookbook →

Compliance archive

Copy signed recordings, transcripts and call-detail records into your own retention store. Recipes for S3-compatible buckets, on-prem SMB and Azure Blob. Integrity re-verification.

Recordings · transcripts · CDR Open cookbook →

SIEM integration

Forward the CodeB audit log into Splunk, Elastic, Datadog, Grafana Loki or Microsoft Sentinel. HEC + Elastic bulk + Datadog logs + Loki push + Sentinel Data Collection Rules.

5 SIEM destinations Open cookbook →

Need something we do not cover yet? The REST API reference and the OIDC endpoint catalogue are the authoritative surfaces — every recipe on this page is a translation of those documents into a shape a developer can paste into an editor.