Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oidc-client is not able to check session because 'X-Frame-Options' header is set to 'sameorigin' #237

Closed
kubakeil opened this issue Apr 2, 2019 · 3 comments
Assignees
Labels
bug Something isn't working priority: high

Comments

@kubakeil
Copy link

kubakeil commented Apr 2, 2019

oidc-client in SPA application loaded from different host than STS.Identity server is not able to check session http://localhost:5000/connect/checksession.
The check is executed within IFrame and STS.Identity has currenly set Xfo to SameOrigin app.UseXfo(options => options.SameOrigin());

This also likely re-introduce some fixed IdentityServer issues e.g. IdentityServer/IdentityServer4#1224

@skoruba
Copy link
Owner

skoruba commented Apr 2, 2019

Thanks!

@skoruba skoruba self-assigned this Apr 2, 2019
@skoruba skoruba added bug Something isn't working priority: high labels Apr 2, 2019
skoruba added a commit that referenced this issue Apr 4, 2019
@skoruba
Copy link
Owner

skoruba commented Apr 4, 2019

Fixed on dev.

@skoruba skoruba mentioned this issue Apr 4, 2019
@skoruba
Copy link
Owner

skoruba commented Apr 4, 2019

Done on master. Please check new release.
Thanks!

@skoruba skoruba closed this as completed Apr 4, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working priority: high
Projects
None yet
Development

No branches or pull requests

2 participants