got the error when used setupAutomaticSilentRefresh()

Refused to display 'https://**{{IdentityServer}}**/home/error?errorId=CfDJ8DLSMNqY00xHkAbv6cRcv1FnIVWROeaevqLmTAeLxD1HYyg8pYtUaBN4tWmXmfmkEwnTuVy86SH1nTDFTGF7_kCM3PgonNYOBy-hYFnv3_VDtl1uMZaS7-fEUON9I5pWX6XBW13qy54SEspMWCFZwNG-aDheXR1SrKLRTOSSEnzclxhfGfMWLvZ6VVl4TAzSKfMBFm3dif5OVFdnGGuruD0u-46Daj-LTx_gqb2HX-iMUld_9CtCt9PA0boobxB41Buz-fni47UV6WdQjFkoIG9bPnVkBCw-u3aO_ew5IDyR7kiw1fLXYHb7DRuulS4QKA' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors ‘none’

Followed exactly same example on the documentation but got this error. Do I need to do something else?

[mikecabana]

@jeroenheijmans Yep you’re right. I had set up the right config I just can’t spell for the life of me. Turns out my redirectUris did not match(misspelled) what was needed for proper silent refresh. Updated the config and it worked. What helped was setting silentRefreshShowIFrame: true so that I could check the src of the frame which led me to checking the config. Super useful! Thanks!

[jeroenheijmans]

I’m not the OP, but could hazard a guess. The frame-ancestors CSP means that your browser hears from the Identity Server that it only should be iframed inside websites served from specific origins.

It’s likely not something you can fix in (usage) of this Angular Library, but something you should configure in your Identity Server. Configure the hosts that are allowed to serve it in an iframe according to the docs of your IDS (e.g. http://localhost:4200 and any production host that would serve your Angular application).