developerforce / Force.com-JavaScript-REST-Toolkit

ForceTK - a minimal Force.com REST API for JavaScript apps
BSD 3-Clause "New" or "Revised" License
315 stars 175 forks source link

Phonegap + Windows 8: X-Frame-options #57

Open d00001 opened 10 years ago

d00001 commented 10 years ago

I have OAuth set up for portal users as shown here:

https://developer.salesforce.com/blogs/developer-relations/2013/02/oauth-for-portal-users.html

App works fine in iOS and Android but in Windows 8 I get this error:

APPHOST9613: The app couldn’t navigate to [url] because of this error: 401.

I tried using an iframe with the same url and I get the same error.

Some research suggest that this problem is related to X-Frame-options.

@metadaddy-sfdc

This is a sample response headers:

Cache-Control:no-cache, must-revalidate, max-age=0, no-store, private,s-maxage=0
Content-Type:text/html;charset=UTF-8
Date:Fri, 31 Oct 2014 17:34:30 GMT
org.eclipse.jetty.server.include.X-FRAME-OPTIONS:SAMEORIGIN
org.eclipse.jetty.server.include.X-XSS-Protection:0
P3P:CP="CUR OTR STA"
Pragma:no-cache

Transfer-Encoding:chunked X-Powered-By:Salesforce.com ApexPages

Another theory is that the problem is cause because the redirect returns 401 as the error message show.

https://site.force.com/setup/secur/RemoteAccessAuthorizationPage.apexp