search

appsmithorg / appsmith

Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
https://www.appsmith.com
Apache License 2.0
33.95k stars 3.66k forks source link

Support cross-domain embedded of Private Appsmith applications #19569

Open abhvsn opened 1 year ago

abhvsn commented 1 year ago

In Phase 1, we supported SSO of Private Appsmith applications when the parent and the child(Appsmith app) were subdomains of the same domain. We need to add support for instances that want to embed Appsmith apps across domains.

abhvsn commented 1 year ago

We will be sharing the session cookies within the iframe to support private apps and also introducing the CSRF token to avoid any security loopholes that will get introduced as a part of above task.