I am working on a widget that will be embedded into other applications via an iframe (I believe I have to use an iframe because my widget will issue endpoint calls to its own API service, so the iframe needs to have the same origin as this API service).