Skip to content
Pliic

Troubleshooting

The most common issues when integrating the widget have quick fixes. See below.

”Origin not allowed”

Section titled “”Origin not allowed””

The widget sends the browser’s Origin header with every request. Your site’s domain must be listed in the app’s allowed domains.

Go to Apps → your app → General tab and add your domain. Wildcards are supported (e.g. *.example.com).

”Missing X-App-Key header”

Section titled “”Missing X-App-Key header””

The script tag is missing or uses the wrong attribute name. Make sure you’re using data-app-key (not data-key or data-pliic-key).

<script
  src="https://pliic.com/widget/v1.js"
  data-app-key="pk_live_xxx"
  async
></script>

Widget not appearing

Section titled “Widget not appearing”

If the widget button doesn’t appear on your site, check:

  • Is the script tag before </body>?
  • Is the public key correct? Check in Apps → your app → Install tab.
  • Open the browser DevTools console — look for warnings with the [Pliic] prefix.
  • Is the domain in the allowed domains list?

”Your session expired” in visitor mode

Section titled “”Your session expired” in visitor mode”

This is expected once the visitor session (30 days) has run its course, or after you generate a new secret key for the app — rotating the key ends all active visitor sessions. The person just needs to verify their email again; no records are lost. See User authentication for the full visitor mode flow.

Testing locally

Section titled “Testing locally”

There are two ways to test the widget in local development:

  • Use the Playground tab on the app edit page (no domain config needed).
  • Add localhost (or 127.0.0.1) to the app’s allowed domains list.

Next steps

Section titled “Next steps”