Hi all I have an application that is using Auth0 to authenticate users. Now I would like that any third party sites can embed my application in an iframe so that they can use the services from my app. I’m not sure about the security implications of this. I did a PoC and tried to access the id toke…

Replying to myself, in case that anyone has a question like this. I asked Auth0’s professional services and they told me that it’s not a good idea. I proposed a mitigation strategy (using CSP HTTP header to whitelist the domains that are allowed to embed the login page) but they didn’t comment abo…

Is it secure to embed SPA in iframe?

Get Help

system Closed May 26, 2021, 8:56am 4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Use SPA SDK with Cross-Origin Embeder Policy Get Help auth0-spa-js	7	3395	May 2, 2022
Auth0 SSO with iframe Get Help auth0 , login , iframe	3	11405	October 26, 2020
Allowing auth0 third party cookies Get Help connections , custom-social-connections-branding	2	236	December 17, 2024
Auth0 on iframe Get Help	2	4481	March 18, 2020
Allowing app to be used in iFrames for custom domains Product Feedback login , security , iframe	7	4561	November 17, 2024

Is it secure to embed SPA in iframe?

Related topics