You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by GitBox <gi...@apache.org> on 2020/01/29 06:10:13 UTC
[GitHub] [incubator-superset] aman101097 opened a new issue #9042: Iframe
embedding in a https site says CSRF token missing
aman101097 opened a new issue #9042: Iframe embedding in a https site says CSRF token missing
URL: https://github.com/apache/incubator-superset/issues/9042
Whenever I try to embed my dashboard as an iframe in a hosted website of mine..it says CSRF token missing.
I tried everything nothing helped.
Any leads on this will be appreciated
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] nurmuda commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
nurmuda commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-763385906
> Just using it in latest apache 0.38. Using amancevice superset docker image https://github.com/amancevice/docker-superset
>
> Ensure that your superset instance is loading superset_config.py and it should work
Hi @gonzalo @aman101097 ...where is I can find **superset_config.py** in your docker image ? I need to create a new one ? Usually, I can find them in **pythonpath_dev**
Please let me know ...Thx U ...
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] kunal15145 commented on issue #9042: Iframe
embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
kunal15145 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-588272609
SESSION_COOKIE_SAMESITE = None. Try doing this in the config file
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] aman101097 closed issue #9042: Iframe
embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
aman101097 closed issue #9042: Iframe embedding in a https site says CSRF token missing
URL: https://github.com/apache/incubator-superset/issues/9042
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] nurmuda commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
nurmuda commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-763370489
> Just using it in latest apache 0.38. Using amancevice superset docker image https://github.com/amancevice/docker-superset
>
> Ensure that your superset instance is loading superset_config.py and it should work
Hi Gonzalo thx for the response...I already using superset docker from amancevice , version 0.38.0 ....what the user / passsword, I cant login using admin/admin ...Please let me know
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] gonzalo commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
gonzalo commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-762813865
Just using it in latest apache 0.38. Using amancevice superset docker image https://github.com/amancevice/docker-superset
Ensure that your superset instance is loading superset_config.py and it should work
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] nurmuda commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
nurmuda commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-763375767
> flask fab create-admin
Ok thx @aman101097 for the quick response ...I can login now ....
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] aman101097 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
aman101097 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-699433970
> Try = 'None'
No, why would you make it a string?
FYI, None is a defined keyword in python
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] keehl1213 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
keehl1213 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-732669519
Same here
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] trsree commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
trsree commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-699026339
SESSION_COOKIE_SAMESITE = None didnt work..
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] aman101097 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
aman101097 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-699434382
> SESSION_COOKIE_SAMESITE = None didnt work..
>
> What is the solution to fix the issue?
SESSION_COOKIE_SAMESITE = "Lax" # One of [None, 'None', 'Lax', 'Strict']
These are four values that can be applied there..Can u try the string None?
Also make sure you are loading superset_config.py file correclty
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] 1997827 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
1997827 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-705717825
> > SESSION_COOKIE_SAMESITE = None didnt work..
> > What is the solution to fix the issue?
>
> SESSION_COOKIE_SAMESITE = "Lax" # One of [None, 'None', 'Lax', 'Strict']
> These are four values that can be applied there..Can u try the string None?
> Also make sure you are loading superset_config.py file correclty
None or 'None'
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] nurmuda commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
nurmuda commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-762733390
@gonzalo ...I already try..but not working ..pls let me know
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] zhugw commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
zhugw commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-846815028
In my case I used version 1.1.0
As @aman101097 way only has below config is ok
```
WTF_CSRF_ENABLED = False
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] gonzalo commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
gonzalo commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-763524627
in case you're using that docker image you should bind a location /etc location on your host and place there the superset_config file
In my case this is part of my docker-compose.yml (for a swarm deployment)
```
version: '3.3'
services:
dashboard:
image: amancevice/superset:0.38.0
volumes:
- superset-data:/var/lib/superset
- /etc/localtime:/etc/localtime:ro
- /xxxx/xxxx/superset-dashboard/etc:/etc/superset
```
and in my host I have a /xxxx/xxxx/superset-dashboard/etc/superset_config.py file with these contents
```
SESSION_COOKIE_SAMESITE = 'None' # One of [None, 'Lax', 'Strict']
SESSION_COOKIE_SECURE = True
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [superset] aman101097 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
aman101097 commented on issue #9042:
URL: https://github.com/apache/superset/issues/9042#issuecomment-763371761
Hi u have to exec into the docker image and use the commands:-
```
export FLASK_APP=superset
flask fab create-admin
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] 1997827 edited a comment on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
1997827 edited a comment on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-705717825
> > SESSION_COOKIE_SAMESITE = None didnt work..
> > What is the solution to fix the issue?
>
> SESSION_COOKIE_SAMESITE = "Lax" # One of [None, 'None', 'Lax', 'Strict']
> These are four values that can be applied there..Can u try the string None?
> Also make sure you are loading superset_config.py file correclty
None or 'None' both not working
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] aman101097 removed a comment on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
aman101097 removed a comment on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-699433970
> Try = 'None'
No, why would you make it a string?
FYI, None is a defined keyword in python
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] gonzalo commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
gonzalo commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-734449903
Same problem here. Superset deployed with a docker image, loading superset_config.py with a binding (and sure is loading conf file because I had some problems parsing it at beginning)
To make it work at login I have to add two different confs
```
SESSION_COOKIE_SAMESITE = 'None' # One of [None, 'Lax', 'Strict']
SESSION_COOKIE_SECURE = True
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] sujeethkanuganti commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
sujeethkanuganti commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-715819324
Is this resolved ? Have same problem.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] 1997827 edited a comment on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
1997827 edited a comment on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-705717825
> > SESSION_COOKIE_SAMESITE = None didnt work..
> > What is the solution to fix the issue?
>
> SESSION_COOKIE_SAMESITE = "Lax" # One of [None, 'None', 'Lax', 'Strict']
> These are four values that can be applied there..Can u try the string None?
> Also make sure you are loading superset_config.py file correclty
None or 'None' both not working
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] trsree edited a comment on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
trsree edited a comment on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-699026339
SESSION_COOKIE_SAMESITE = None didnt work..
What is the solution to fix the issue?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] gonzalo commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
gonzalo commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-750302960
@edge7 have you checked my solution?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] edge7 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
edge7 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-750300967
anyone found a solution that actually works?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] 1997827 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
1997827 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-705717825
> > SESSION_COOKIE_SAMESITE = None didnt work..
> > What is the solution to fix the issue?
>
> SESSION_COOKIE_SAMESITE = "Lax" # One of [None, 'None', 'Lax', 'Strict']
> These are four values that can be applied there..Can u try the string None?
> Also make sure you are loading superset_config.py file correclty
None or 'None'
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] aman101097 commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
aman101097 commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-722202713
Try this:
TALISMAN_CONFIG = {
"content_security_policy": None,
"force_https": False,
"force_https_permanent": False,
}
CSRF_ENABLED = False
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
[GitHub] [incubator-superset] amitNielsen commented on issue #9042: Iframe embedding in a https site says CSRF token missing
Posted by GitBox <gi...@apache.org>.
amitNielsen commented on issue #9042:
URL: https://github.com/apache/incubator-superset/issues/9042#issuecomment-699042672
Try = 'None'
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org