Msal Js Supports Iframe In Iframe scenarios
See original GitHub issueAs it currently stands msal js blocks certain scenarios when rendered inside of an iframe because there are edge case scenarios that can not be supported.
The goal is to unblock these so that it can be supported.
Linking all the relevant PRs for this ask:
Beta release
Released msal@1.2.0-beta.0
here
- #939: Allows iframed applications call loginPopup(), acquireTokenPopup() and acquireTokenSilent().
- #983: Cache cleanup
Next beta release contents
- #975: Allows iframed applications call loginRedirect(), acquireTokenRedirect() by establishing a trust-relationship model with the top frame. This assumes the top-frame also runs MSAL JS.
- #1010 , #994 : Supporting multiple instances of MSAL JS and relevant cache cleanup.
This is also a prerequisite for #975 and allows concurrent
acquireTokenSilent()
calls. - #1042: Clear temporary cache on error exit paths
- Documentation of the protocols/logic introduced for the above functionality to work
Issue Analytics
- State:
- Created 4 years ago
- Reactions:6
- Comments:37 (21 by maintainers)
Top Results From Across the Web
Does the latest version of MSAL support loginRedirect ...
I have scenario where I have a SPA loading in an IFrame from within another parent page. Currently, I am using loginPopup() from...
Read more >Deep dive on using MSAL.js to integrate Angular single-page ...
This month's in-depth topic: Deep dive on using MSAL. js to integrate Angular single-page applications with Azure Active Directory.
Read more >xss - MSAL in Chrome Extension: Secure Token Storage
Specific questions re MSAL.js for the given the scenario: Is our iframed app, or its localStorage-cached token vulnerable to anything running in ...
Read more >msal | Yarn - Package Manager
Microsoft Authentication Library for JavaScript (MSAL.js). Getting Started · AAD Docs · Library Reference · Support · Samples. MSAL for JavaScript enables ...
Read more >Using MSAL.js 2.0 in SharePoint Framework (SPFx)
For instance using Safari Browser and the Intelligent Tracking Protection (ITP) which will not work with implicit flow or iFrames as used by ......
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Released
msal@1.2.0-beta.0
here. Please note that the CDN for this beta is not yet released and will be available early next week.We are working on releasing a follow up beta for the remaining use cases mentioned in the description.
UPDATE:
To facilitate feedback from various teams, we have been releasing betas for the last 2 months and currently at
msal 1.2.0-beta.4
. The final PR needed for cache cleanup is merged this week to dev and we are releasingmsal 1.2.0-beta.5
today. There will be amsal 1.2.0
released later this week which will be the same asmsal 1.2.0-beta.5
.