search

curityio / oauth-assistant-example

A vanilla JavaScript SPA that uses the OAuth Assistant
Apache License 2.0
0 stars 0 forks source link

Popups and iFrames not working in Firefox or Chrome #6

Open barbaramcinnes opened 5 months ago

barbaramcinnes commented 5 months ago

Trying to play with this and explore Curity behaviour with a local identity server, but haven't been able to get it to work properly. Issues seem to be in the popup/iframes. I can get an authorization code grant working and see tokens.

In Chrome I see this error in the console: Refused to frame 'https://localhost:8443/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'". In Firefox I see: image

I'm using: Firefox 124.0.2 (64-bit) Chrome 123.0.6312.124 (Official Build) (arm64) on Mac Sonoma 14.4.1

anestos commented 5 months ago

Have you added your application host to the allowed origins in the client configuration? Screenshot 2024-04-11 at 15 21 48