Embedding self-service in iframe for sharing with services? #93
-
|
I want to share the self-service written for Ory Cloud(Ory Kratos) for multiple applications(multiple TLDs), so that I dont have to write it again. Is it possible for me to embed it in iframe, and pass the cookie back to parent? Is there a better way to achieve what I want? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 4 replies
-
|
Are your apps on a common TLD or on separate TLDs? Could you give a quick example? |
Beta Was this translation helpful? Give feedback.
-
|
In my imaginary scenario, I will have two completely unrelated applications and one self-service, all with different TLDs. Let say I have App A and App B, they would have domain names of foo.com and bar.com. The domain name of the self-service will be called something generic, like auth.com |
Beta Was this translation helpful? Give feedback.
-
|
Unfortunately, iframes do not break the isolation of domains. That is of course a good thing for security, but also means the approach won’t work. You can however host the ory tunnel on these domains for each application to get this working! |
Beta Was this translation helpful? Give feedback.
-
|
Indeed. Using ory tunnel will be a much more simple solution. Thanks! |
Beta Was this translation helpful? Give feedback.
-
|
Cool, if that helped can you mark the suggestion as an answer? |
Beta Was this translation helpful? Give feedback.
Are your apps on a common TLD or on separate TLDs? Could you give a quick example?