Login doesn't work in Safari

[adammcmaster]

[Log] Using OAuth (implicit grant) for login (main-6f3e54ae0490a120deba.min.js, line 27)
[Info] Setting app ID to – "442c8c4910fbb9be14bd9a92ee6e14ad29159d0217d0345fd9b2db3d881c4a7d" (main-6f3e54ae0490a120deba.min.js, line 27)
[Error] Refused to display 'https://panoptes.zooniverse.org/users/sign_in' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
[Error] Sandbox access violation: Blocked a frame at "https://learn.wildcamgorongosa.org" from accessing a frame at "null".  The frame being accessed is sandboxed and lacks the "allow-same-origin" flag.
    (anonymous function)
[Info] TypeError: undefined is not an object (evaluating 'e.indexOf') — main-6f3e54ae0490a120deba.min.js:27:11416 (main-6f3e54ae0490a120deba.min.js, line 27)
[Log] Checking current user (main-6f3e54ae0490a120deba.min.js, line 21)
[Log] Getting bearer token (main-6f3e54ae0490a120deba.min.js, line 21)
[Log] Getting new bearer token from panoptes.zooniverse.org – "https://panoptes.zooniverse.org" (main-6f3e54ae0490a120deba.min.js, line 21)
[Error] Failed to load resource: the server responded with a status of 401 (Unauthorized) (token, line 0)
[Error] Failed to get bearer token
    (anonymous function) (main-6f3e54ae0490a120deba.min.js:21:26925)
    promiseReactionJob
[Info] No current user (main-6f3e54ae0490a120deba.min.js, line 21)
[Log]  action @ 10:34:41.317 SET_LOGIN_USER  (main-6f3e54ae0490a120deba.min.js, line 30)
[Log]  prev state – {classrooms: Object, login: {user: null}} (main-6f3e54ae0490a120deba.min.js, line 30)
[Log]  action – {type: "SET_LOGIN_USER", user: null} (main-6f3e54ae0490a120deba.min.js, line 30)
[Log]  next state – {classrooms: Object, login: {user: null}} (main-6f3e54ae0490a120deba.min.js, line 30)

cc @camallen Not sure if this is due to our security changes in Panoptes?

[camallen]

@rogerhutchings will you have some time to look at the blocked iframe in safari?

[Error] Sandbox access violation: Blocked a frame at "https://learn.wildcamgorongosa.org" from accessing a frame at "null".  The frame being accessed is sandboxed and lacks the "allow-same-origin" flag.
    (anonymous function)

[rogerhutchings]

yeah, will take a look now

[adammcmaster]

Noting that this is caused by zooniverse/panoptes-javascript-client#30

[shaunanoordin]

Issue Update

On OSX + Safari 9, logging in on http://lab.wildcamgorongosa.org as zootester1 poses no issues and there are no errors/warnings in the console.

Status

Issue resolved (externally, possibly), closing issue

[adammcmaster]

@shaunanoordin This is still an issue. Make sure to set privacy settings like so:

[shaunanoordin]

Noted, thanks for the update @astopy. I can confirm that you're correct - OSX + Safari 9 fails to allow login when the Privacy->Cookes And Website Data settings are set to Allow from current website only