💥 [DevOps] Authentik/BBB/Frontend: IFrame auf stage1 und live erlauben

dreammall-earth / dreammall.earth

Dreammall.earth website & product page

https://dreammall-earth.github.io/dreammall.earth/

Apache License 2.0

5 stars 1 forks source link

💥 [DevOps] Authentik/BBB/Frontend: IFrame auf stage1 und live erlauben #946

Open Elweyn opened 1 month ago

Elweyn commented 1 month ago

💥 DevOps

As user I want to stay on the same platform to Sign In, Sign Up and joinMeetings. We now can't use the IFrame to auth.dreammall.earth to refresh the token.

🤖 ToDos

[ ] Nginx accepts X-Frame from auth.dreammall.earth
[x] Nginx accepts X-Frame from cafe.dreammall.earth

Bettelstab commented 4 weeks ago

Maybe this information helps: Authentik seems to prohibit it's usage in iframes by setting CSP frame-ancestors to 'self'. X-Frame-Options are ignored when a CSP with this setting is present, so we need to override the CSP instead.