From 2d9547ac9da9d6d0d6dbf57b216dd69a81fbab79 Mon Sep 17 00:00:00 2001 From: Yacine Kahlerras Date: Fri, 9 Oct 2026 13:59:14 +0100 Subject: [PATCH] fix(examples): kiosk copy says later signer URLs aren't issued early (TurboDocx/Docs#214) The kiosk card and README said a later signer's URL isn't created until their turn. The token exists from document creation; TurboSign won't issue the URL out of turn and refuses an out-of-turn signature even with a valid link. Co-Authored-By: Claude Opus 5.5 --- examples/embedded-web-app/README.md | 4 ++-- examples/embedded-web-app/src/pages/Kiosk.tsx | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/examples/embedded-web-app/README.md b/examples/embedded-web-app/README.md index 36f8897a..7ab7584e 100644 --- a/examples/embedded-web-app/README.md +++ b/examples/embedded-web-app/README.md @@ -92,5 +92,5 @@ client (fetch mocked): its endpoints, error propagation, and the kiosk mint retr - **Completion is push** — the single-signer path listens for the `turbosign:completed` postMessage; the widget surfaces it as an `onCompleted` callback. In production, pin the listener to your known TurboSign origin and/or confirm via the `completed` webhook. -- **The kiosk mints just-in-time** — a later signer's URL is created only when it's their turn; the - backend enforces the order. +- **The kiosk mints just-in-time** — TurboSign won't issue a later signer's URL until it's their turn, + and refuses an out-of-turn signature even with a valid link. diff --git a/examples/embedded-web-app/src/pages/Kiosk.tsx b/examples/embedded-web-app/src/pages/Kiosk.tsx index 87e9facf..c452d51c 100644 --- a/examples/embedded-web-app/src/pages/Kiosk.tsx +++ b/examples/embedded-web-app/src/pages/Kiosk.tsx @@ -104,8 +104,8 @@ export function Kiosk() { Everyone signs, one after another One document, two signers, in order, on the same device. The first signs now; when they finish, the - kiosk mints the next signer's URL just-in-time and loads their turn automatically. A later signer's URL - isn't created until it's genuinely their turn. + kiosk mints the next signer's URL just-in-time and loads their turn automatically. TurboSign won't issue + a later signer's URL until it's their turn, and refuses an out-of-turn signature even with a valid link.