CORS issue

[duckwc]

Describe the bug Some of the iframe features are not working correctly in GLPI: I noticed

• iframe auto resize
• dynaforms are not displaying at all The error is related to cross-origin requests since my sites are not sharing the same complete domain: one is glpi.mydomain.com and the other pmaker.mydomain.com

To Reproduce Steps to reproduce the behavior:

1. assign a new process to a ticket
2. Dynaform iframe is empty (only showing the headers)

Expected behavior Dynaform should display the form and resize the iframe to the size of that form

**Workaround I workaround that issue by editing /processmaker/workflow/engine/js/cases/core/pmDynaform.js and /processmaker/workflow/engine/methods/cases/cases_Step.php and avoiding calls to parent DOM like parent.showCaseNavigatorPanel

Screenshots

Desktop (please complete the following information):

• OS: windows
• Browser firefox 89 and chrome 91

**Server:

• OS centos 7.6
• Apache 2.4.6
• GLPI 3.5.5 on php 7.2.34
• PM 3.3.0-community-RE-1.7 on php-fpm 7.1.33

*Additional context Add any other context about the problem here.

[tomolimo]

Hello @duckwc Usually this trouble comes from the the fact that GLPI and ProcessMaker server do not share the same domain root. Good exp: GLPI url: http://glpi.acme.com and PM url: http://pm.acme.com, in this case the shared domain is acme.com Could you check that? Thank you, Regards, Tomolimo

[duckwc]

Hello @tomolimo ,

Sorry I didn't mention it in the issue, but yes they do, both in https: one is https://glpi.mydomain.com and the other https:// pmaker.mydomain.com

Thank you, Cyril

[tomolimo]

Hello @duckwc Ok, thank you, Another question: what URL is currently used for GLPI by your browser? Thank you Regards, Tomolimo

[duckwc]

Hello @tomolimo

The URL is https://glpi.mydomain.com

Regards, Cyril

[tomolimo]

Hello @duckwc

Then we should go to debug in the javascript console in your Browser to get the real error messages.

Could you press F12 (or activate the development tools), tand try to replay the issue?

Then you should have some errors in the javascript console.

Thank you Regards,

Tomolimo

[duckwc]

Hello @tomolimo

The errors I have are the form

Uncaught DOMException: Permission denied to access property "xxx" on cross-origin object

xxx vary from one page to the other. In the dynaforms page, its showCaseNavigatorPanel. JS file involved is js/cases/core/pmDynaform.js

My workaround for this file is to edit the js file and replace line 22 if (pm_run_outside_main_app === 'true') { with if (0 && pm_run_outside_main_app === 'true') { This does skip the tests to parent DOM and avoids the script to exit on error, and the workflow is displayed...

Thank you, Regards, Cyril

[tomolimo]

Hello @duckwc Could we continue to discuss with discord? Regards, Tomolimo

[duckwc]

sure @tomolimo here is my account id : duckwc#7400

[tomolimo]

and mine is: Tomolimo#1077

[tomolimo]

Hello @duckwc Could you check if the PM server URL is correctly rewritten like explained here: https://github.com/tomolimo/processmaker-server/wiki/Inbound-rewrite-rules Thank you, Regards, Tomolimo

[tomolimo]

Solved after applying https://github.com/tomolimo/processmaker/issues/121#issuecomment-861400044