question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Msal Js Supports Iframe In Iframe scenarios

See original GitHub issue

As it currently stands msal js blocks certain scenarios when rendered inside of an iframe because there are edge case scenarios that can not be supported.

The goal is to unblock these so that it can be supported.

Linking all the relevant PRs for this ask:

Beta release Released msal@1.2.0-beta.0 here

  • #939: Allows iframed applications call loginPopup(), acquireTokenPopup() and acquireTokenSilent().
  • #983: Cache cleanup

Next beta release contents

  • #975: Allows iframed applications call loginRedirect(), acquireTokenRedirect() by establishing a trust-relationship model with the top frame. This assumes the top-frame also runs MSAL JS.
  • #1010 , #994 : Supporting multiple instances of MSAL JS and relevant cache cleanup. This is also a prerequisite for #975 and allows concurrent acquireTokenSilent() calls.
  • #1042: Clear temporary cache on error exit paths
  • Documentation of the protocols/logic introduced for the above functionality to work

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Reactions:6
  • Comments:37 (21 by maintainers)

github_iconTop GitHub Comments

2reactions
sameeragcommented, Sep 26, 2019

Released msal@1.2.0-beta.0 here. Please note that the CDN for this beta is not yet released and will be available early next week.

We are working on releasing a follow up beta for the remaining use cases mentioned in the description.

1reaction
sameeragcommented, Dec 4, 2019

UPDATE:

To facilitate feedback from various teams, we have been releasing betas for the last 2 months and currently at msal 1.2.0-beta.4. The final PR needed for cache cleanup is merged this week to dev and we are releasing msal 1.2.0-beta.5 today. There will be a msal 1.2.0 released later this week which will be the same as msal 1.2.0-beta.5.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Does the latest version of MSAL support loginRedirect ...
I have scenario where I have a SPA loading in an IFrame from within another parent page. Currently, I am using loginPopup() from...
Read more >
Deep dive on using MSAL.js to integrate Angular single-page ...
This month's in-depth topic: Deep dive on using MSAL. js to integrate Angular single-page applications with Azure Active Directory.
Read more >
xss - MSAL in Chrome Extension: Secure Token Storage
Specific questions re MSAL.js for the given the scenario: Is our iframed app, or its localStorage-cached token vulnerable to anything running in ...
Read more >
msal | Yarn - Package Manager
Microsoft Authentication Library for JavaScript (MSAL.js). Getting Started · AAD Docs · Library Reference · Support · Samples. MSAL for JavaScript enables ...
Read more >
Using MSAL.js 2.0 in SharePoint Framework (SPFx)
For instance using Safari Browser and the Intelligent Tracking Protection (ITP) which will not work with implicit flow or iFrames as used by ......
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found