This page lives on embed-demo.jnc360.tech and embeds the editors
from editors-qa.jnc360.tech — a genuinely different origin, the way a
real customer site would. Every postMessage below targets the editor's origin and
every reply is origin-checked.
Push content in with forge:load, pull the edited .docx back with
forge:export — across origins.
The embed is handed savepath=/demo-store/user42/report.docx — the
path carries the user's identity, the storing side authorizes it. (Here the store is the
editor origin's service worker, so no backend is needed for the demo; in production it's your
API endpoint.) Save, then reload the frame — the document comes back. Toggle encryption and
the stored bytes become AES-GCM ciphertext.
A shared document is locked for editing but its form fields work (fill mode auto-enables). Viewer below is a read-only spreadsheet for comparison.