ForbiddenError: invalid csrf token - while logging in through an iframe

DeviceFarmer / stf

Control and manage Android devices from your browser.

https://devicefarmer.github.io

Other

3.52k stars 497 forks source link

ForbiddenError: invalid csrf token - while logging in through an iframe #710

Open fabianclain opened 1 year ago

fabianclain commented 1 year ago

this reproduces on any device/config.

if I connect directly to stf, works without any issue. If I move the url into an Iframe I get ForbiddenError: invalid csrf token

Not sure where to set the token (I already generated one from UI)

fabianclain commented 1 year ago

is there an update on this? I was able to dig this: openstf on the old repository, regarding SESSION SECRET. but I can't figure out why I am getting that error.

fabianclain commented 1 year ago

bump, with the hope that someone is having some info on this.

KingRat0011 commented 5 months ago

Hi @fabianclain I have the same issue when using an iFrame, I logged this ticket as well https://github.com/DeviceFarmer/stf/issues/781 Did you have any luck in solving this?