spring-projects / spring-projects/spring-security
Spring Web Application not working in Iframe inside Safari Browser
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Describe the bug
Spring Web Application not working in Iframe inside Safari Browser and Chrome 80 Browser due to same site cookie is reestricted.
To Reproduce
Disable iframe options in security. Go to anywebsite like w3schools, Jsfiddle or Code pen and try to webapplication url and login is not working.
Expected behavior
If login page is visible in Iframe. User should be able to logged in iframe.
Sample
(https://github.com/Feroz-Siddiqui/Springboot-iframe-test)
Reports that include a sample will take priority over reports that do not.
At times, we may require a sample, so it is good to try and include a sample up front.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the linked Springboot-iframe-test sample and reproduce the login flow in an iframe using Safari and Chrome 80, following the reported security configuration and SameSite-cookie conditions. Trace the Spring Security authentication behavior involved; done means a user can log in successfully when the application is embedded in an iframe.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authentication, security, web-dev
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100