Mints a link that shows the unpublished draft on the operator's own site.

The studio's in-console preview cannot reach a product behind a login, and never will: the operator's session cookie is SameSite-scoped to their origin and is not sent into our iframe by any modern browser, quite apart from the framing headers most apps set. So the preview goes the other way — the token returned here rides the URL fragment of a link to their own site, where the widget is already installed and their session already exists, and the loader repaints with the draft instead of what visitors see. In the fragment rather than the query string on purpose: fragments are not sent to servers, so the token never reaches their access logs and never leaks through a Referer header. It expires in half an hour and opens nothing but a read of this widget's draft presentation.

curl -X POST "https://api.fruxon.com/v1/tenants/string/agents/string/embedConfigs/string:generatePreviewToken"

{
  "token": "string",
  "expiresAt": 0
}

{
  "type": "string",
  "title": "string",
  "status": 0,
  "detail": "string",
  "instance": "string",
  "property1": null,
  "property2": null
}