Closed

iFrame Auth not working with responseType: 'code', #6108

bhasinp created 3 years ago

ABP Framework version: v7.2.2
UI type: Angular
DB provider: EF Core
Tiered (MVC) or Identity Server Separated (Angular): yes
Exception message and stack trace:
Steps to reproduce the issue:"

Hi Team,

I am suing responseType: 'code' i.e. My frontend application (Angular) get authenticated from backend and get navigated back after authenticated.

In Normal flow its working fine but in I have a used case I need to use it in iFrame,

In iFrame the user see the login screen and authenticated correctly but after auth it again goes back to login not to frontend.

here are my findings in normal flow it navigated to angular ?code=xxx

but in iFrame it again go back to login

Please suggest how can i fix this.

17 Answer(s)

0

Anjali_Musmade created 3 years ago
Support Team Member

Please check the request in the browser. I think the browser blocks some cookies. https://docs.abp.io/en/abp/latest/UI/Angular/Authorization?&_ga=2.56835946.1553630902.1698646270-593269556.1671445033#authorization-code-flow

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

1
0

bhasinp created 3 years ago

How can I check that ? I didn't found much difference

However everything, token etc all the details are stored in local storage

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

hi

You can check it in your console of devtools(F12).

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

bhasinp created 3 years ago

No There are no error logs

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

hi

Do you have a URL of your website that I can check online?

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

bhasinp created 3 years ago

https://mot-r.co this is the root website

Do you need login details as well ?

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

Yes, Please share a test user info. liming.ma@volosoft.com
I will check the error online

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

bhasinp created 3 years ago

Sent it to you over mail

Subject: ABP Support Ticket #6108

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

Thanks,

How can I see the iFrame issue? Can you share some steps?

I can successfully log in without any issues.

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

bhasinp created 3 years ago

Ok I will share the details shortly.

Thanks

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

Thank you

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0
bhasinp created 3 years ago
Hi Team,

Here is how you can produce the same issue

Go to https://www.w3schools.com/tags/tryit.asp?filename=tryhtml_iframe

Paste the following code and run <iframe src="https://mot-r.co" style="width:1000px;height:700px" title="W3Schools Free Online Web Tutorials"> </iframe>

Login with the test credentials and it will fail

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

gterdem created 3 years ago
Senior .NET Developer

iFrame is not a suggested component for any Authentication process because of security reasons and blocked by browsers reasons mainly based on phishing attacks.

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

bhasinp created 3 years ago

Yes But in my used case I need to make my web working in iFrame. Please suggest how can I achieve this

Thanks

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

hi

The browser may block iframe and there is nothing we can do.

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

bhasinp created 3 years ago

Can you suggest me how can I use both responseType: 'code' and 'token' simultaneously, because if I go with responseType: 'token' things work well in iFrame for registered user, but when I added AD Login I need to use responseType:'code' which is not working in iFrame. I will use registered users for iFrame and block AD login in iFrame

Please suggest

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
0

maliming created 3 years ago
Support Team Fullstack Developer

hi

This is related to angular-oauth2-oidc, our angular team will check and reply to you.

Markdown supported.

Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)