Coding With Fun
Home Docker Django Node.js Articles Python pip guide FAQ Policy

What are the requirements for check session iframe?


Asked by Idris Clayton on Dec 05, 2021 FAQ



The message posting to the check_session_iframe must fulfil the following: The message must be posted from the exact same web origin (scheme, hostname, port) as the client redirect_uri to which the OpenID authentication response was delivered.
Thereof,
Check session iframe 1 Purpose. After signing in a user with OpenID Connect the client application may need to periodically check if the user is still logged in with the OpenID provider. 2 Prerequisites. Check session polling must be enabled in the Connect2id server. ... 3 Usage. ... 4 Further pointers. ...
Furthermore, That way the token in the iframe url get parameter becomes invalid, so even when user see it, he cannot do anything. New token which is received in iframes server is saved in session. So now from client side - when client buys and item in iframe, he does not need to pass token in request, because it is in session.
Additionally,
Iframe server when receives request, does buy item and send request to partner server info about buying item, so the partner could reduce the money. In this request token is is passed to partner server from session.
And,
One iframe uses external content and does not require authentication (removing this iframe from the page does not change anything). The other iframe uses dynamically generated content from the same domain and does check whether the session variables are still there. One of the functions refreshes the content of that dynamically generated iframe.