topic Re: Embed Iframe using Oauth in Integration, Extension & APIs

Embed Iframe using Oauth

thomaspessato — Tue, 16 Aug 2022 21:30:48 GMT

Hello,

I am trying to embed an iframe with a Qlik application within a domain hosted by me.

I have already configured all the CSP indicated.

We are utiizando Oauth. I tried to request the csrf-token through the REST API, but apparently we can't because it doesn't support this kind of authentication.

Previously we used web-integration-id for this, but since we have our own login and database, we opted to go with Oauth.

Summary:
How should I proceed to embed content using Oauth?

Re: Embed Iframe using Oauth

Dave_Channon — Tue, 20 Dec 2022 15:22:16 GMT

Hey @thomaspessato - although your post was a while ago, I thought I'd add a link to some info for others who might find this via search, since we've released new capabilities since your question & updated the docs, per the changelog here https://qlik.dev/changelog/oauth-has-been-released

For anyone else looking at using OAuth for web integrations, we have a summary of our auth approaches and example use cases here: https://qlik.dev/basics/authentication-options

We currently support OAuth in the platform SDK, capabilities API and enigma/nebula. We are currently looking at how we bring this to iframe or iframe-like embedding options.

Re: Embed Iframe using Oauth

thomaspessato — Tue, 20 Dec 2022 15:30:37 GMT

Hi!

Looks like the IFrame capability is already working with Oauth SPA. We
tested and it looks good until now. Do you have any known issues?

Thanks!

Re: Embed Iframe using Oauth

Dave_Channon — Wed, 21 Dec 2022 12:45:50 GMT

Hey @thomaspessato - interesting, do you potentially have an active session from another tab which might have provided you with access rather than via OAuth?

I sense checked with @Aiham_Azmeh and the current iframe implementation shouldn't support an OAuth-only pattern.

Feel free to ping me a message if you want to dig into it offline!

Re: Embed Iframe using Oauth

thomaspessato — Thu, 12 Jan 2023 20:24:01 GMT

@Dave_Channon didn't have the time to do it, but I'm scheduled to check this next week. I'll get in touch.