codeant-ai-for-open-source[bot] commented on PR #36933:
URL: https://github.com/apache/superset/pull/36933#issuecomment-4054517804
## **Sequence Diagram**
This PR adds a new embeddable chart flow where the caller requests an
ephemeral chart embed, Superset issues a permalink plus guest token, and the
embedded iframe uses that token to securely fetch chart state and render.
```mermaid
sequenceDiagram
participant Caller
participant SupersetAPI
participant PermalinkStore
participant TokenService
participant HostPage
participant EmbeddedIframe
Caller->>SupersetAPI: Create embeddable chart with form data
SupersetAPI->>PermalinkStore: Save permalink state with allowed domains
SupersetAPI->>TokenService: Create guest token for chart permalink
resource
SupersetAPI-->>Caller: Return iframe URL and guest token
Caller->>HostPage: Insert iframe embed snippet
HostPage->>EmbeddedIframe: Send guest token message on iframe load
EmbeddedIframe->>SupersetAPI: Fetch permalink state using guest token
SupersetAPI-->>EmbeddedIframe: Return chart form data
EmbeddedIframe-->>HostPage: Render chart in iframe
```
---
*Generated by [CodeAnt AI](https://codeant.ai)*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
