[GitHub] [incubator-superset] azure31 opened a new issue #8830: Missing CSRF token when embedding dashboard using iframe in development mode

[GitBox <gi...@apache.org>]

azure31 opened a new issue #8830: Missing CSRF token when embedding dashboard using iframe in development mode
URL: https://github.com/apache/incubator-superset/issues/8830
 
 
   ### Expected results
   I am trying out superset for the first time. I am currently running it in development mode from my local machine and want to embed the dashboards I created in an html using iframes 
   `<iframe src="http://172.20.33.111:8088/superset/dashboard/7/?standalone=true"
   								height="600" width="1200">` 
   
   The embed asks for login credentials and then throws a `CSRF token is missing` error. 
   
   #### Screenshots
   
   Same as [#8382]
   
   #### How to reproduce the bug
   
   Launch Apache Superset using superset run -h 0.0.0.0 -p 8088
   
   Connect the link via iframe into another separate webpage
   See error
   
   ### Environment
   
   -  superset package version: `0.35.1`
   - python version: `3.6.7`
   - node.js version: `v8.10.0`
   - npm version: `3.5.2`
   
   ### Checklist
   
   Make sure these boxes are checked before submitting your issue - thank you!
   
   - [x] I have checked the superset logs for python stacktraces and included it here as text if there are any.
   - [x] I have reproduced the issue with at least the latest released version of superset.
   - [x] I have checked the issue tracker for the same issue and I haven't found one similar.
   
   ### Additional context
   As per [#8382], I have updated the `SESSION_COOKIE_SAMESITE` value to None, but it didn't work for me. 
   
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org