How to implement third-party application authentication when embedding Dify into a website?

[hoojunev]

Self Checks

• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
• [FOR CHINESE USERS] 请务必使用英文提交 Issue，否则会被关闭。谢谢！:）
• Please do not modify this template :) and fill in all the required fields.

Content

I have privately deployed a Chatflow, published it, and embedded it into my website using the method:

<script src="http://private-host/embed.min.js" id="app-id" defer> </script>

However, this currently lacks any authentication mechanism, allowing anyone to access it. Is there a way to ensure that the user context remains consistent with my website’s account system, and that users can only access the Dify AI application after passing my website’s authentication?