search

IdentityServer / IdentityServer3

OpenID Connect Provider and OAuth 2.0 Authorization Server Framework for ASP.NET 4.x/Katana
https://identityserver.github.io/Documentation/
Apache License 2.0
2.01k stars 763 forks source link

client inside iframe generating request is too long error #3878

Closed jdfreemanco closed 7 years ago

jdfreemanco commented 7 years ago

I have an angular app which renders an asp.net mvc app inside an iframe. The angular app and asp.net mvc app use IdentityServer3 for authentication and both are setup to use hybrid flow (so its single sign on). The IdSrvc config was updated to add CSP frame-src http://*.mydomain.com so IdSrv will work within an iframe. After logging into the angular app, going to the page that renders the asp.net mvc app in the iframe the iframe calls the /authorize endpoint but it does it like 40 times and idsrv nonce cookies accumulate until I get the request is too long error.

Does identityserver3 work inside iframe?

ys8eo

brockallen commented 7 years ago

This is a Microsoft bug/issue with their OIDC middleware. Check with them for a solution.