Embed Iframe using Oauth

[thomaspessato]

Hello,

I am trying to embed an iframe with a Qlik application within a domain hosted by me.

I have already configured all the CSP indicated.

We are utiizando Oauth. I tried to request the csrf-token through the REST API, but apparently we can't because it doesn't support this kind of authentication.

Previously we used web-integration-id for this, but since we have our own login and database, we opted to go with Oauth.

Summary:
How should I proceed to embed content using Oauth?

[Dave_Channon · Accepted solution]

Hey @thomaspessato - although your post was a while ago, I thought I'd add a link to some info for others who might find this via search, since we've released new capabilities since your question & updated the docs, per the changelog here https://qlik.dev/changelog/oauth-has-been-released 

For anyone else looking at using OAuth for web integrations, we have a summary of our auth approaches and example use cases here: https://qlik.dev/basics/authentication-options

We currently support OAuth in the platform SDK, capabilities API and enigma/nebula. We are currently looking at how we bring this to iframe or iframe-like embedding options.

[thomaspessato]

Hi!

Looks like the IFrame capability is already working with Oauth SPA. We
tested and it looks good until now. Do you have any known issues?

Thanks!

[Dave_Channon]

Hey @thomaspessato - interesting, do you potentially have an active session from another tab which might have provided you with access rather than via OAuth?

I sense checked with @Aiham_Azmeh and the current iframe implementation shouldn't support an OAuth-only pattern.

Feel free to ping me a message if you want to dig into it offline!

[thomaspessato]

@Dave_Channon didn't have the time to do it, but I'm scheduled to check this next week. I'll get in touch.