Quick start: Django

pip install gauge-support
export GAUGE_APP_ID=<app id> GAUGE_IDENTITY_SECRET=<identity secret> GAUGE_WEBHOOK_SECRET=<whsec_…>

import logging
import os

from django.contrib.auth.decorators import login_required
from django.http import HttpResponse, HttpResponseBadRequest, JsonResponse
from django.views.decorators.csrf import csrf_exempt
from django.views.decorators.http import require_GET, require_POST

from gauge_support import mint_integration_token, verify_webhook

log = logging.getLogger(__name__)
_handled = set()  # use your database in production: ids repeat on retries and resends


@require_GET
@login_required
def gauge_token(request):
    token = mint_integration_token(
        os.environ["GAUGE_IDENTITY_SECRET"],
        app_id=os.environ["GAUGE_APP_ID"],
        user_id=str(request.user.pk),
        integration="customer",
        email=request.user.email or None,
    )
    response = JsonResponse({"token": token})
    response["Cache-Control"] = "no-store"
    return response


@csrf_exempt  # Gauge signs the request instead; the signature is the CSRF defence here
@require_POST
def gauge_webhook(request):
    result = verify_webhook(os.environ["GAUGE_WEBHOOK_SECRET"], request.body, request.headers)
    if not result.valid:
        return HttpResponseBadRequest(result.reason)
    event = result.event
    if event["id"] not in _handled:
        _handled.add(event["id"])
        log.info("gauge %s %s", event["event"], event["id"])
    return HttpResponse(status=200)

from django.urls import path
from support import views

urlpatterns = [
    path("gauge-token", views.gauge_token),
    path("gauge/webhooks", views.gauge_webhook),
]

<script src="https://widget.gauge.chat/v1/<version>/widget.js"
  integrity="sha384-<integrity>" crossorigin="anonymous" async></script>
<script>
  window.addEventListener('load', function () {
    window.PulseWebchat.init({
      apiUrl: 'https://app.gauge.chat/backend',
      connectionId: '<chat connection id>',
      supportMode: true,
      integration: 'customer',
      getToken: function () { // called on every open, so the token is always fresh
        return fetch('/gauge-token', { credentials: 'include' })
          .then(function (r) { return r.json(); })
          .then(function (j) { return j.token; });
      },
    });
  });
</script>