Say I have a website, www.example, with a login box which sits in an iframe situated in api.example. My