Donor sessions

The vendor-URL pattern: the POST returns a Roster-hosted URL wrapping the whole donor flow, which your page opens as a pop-up or embedded with roster.js. The reliable outcome signal is the webhook / event feed — never the end of the flow on your page.