Younify Connect Sample Partner Page

✓ Backend API Secret saved View / Edit
⚠ TESTING ONLY — never embed a Backend API Secret in a production front-end. It is a long-lived, partner-wide server credential and must stay on the partner’s backend. Every call this harness makes with x-mmt-api-secret — minting the one-time launch URL (/v1/webapp/login/{user_id}), listing linked services, unlinking — belongs server-side in a real integration. The partner backend exposes its own narrow endpoints to its frontend (or returns just the data the page needs); the secret never reaches the browser.