Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

token_auth not working with iframe widgets #790

Closed
anonymous-matomo-user opened this issue Jun 11, 2009 · 3 comments
Closed

token_auth not working with iframe widgets #790

anonymous-matomo-user opened this issue Jun 11, 2009 · 3 comments
Labels
Bug For errors / faults / flaws / inconsistencies etc. Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it.
Milestone

Comments

@anonymous-matomo-user
Copy link

I'd like to use the iframe widget's in Drupal, but don't like to set up view access to anonymous users. I tried to append the token_auth parameter to the widget URL, but I'm still not able to see the widget and only get the login dialog.

@robocoder
Copy link
Contributor

matt: was this deprecated, hence #283?

@anonymous-matomo-user
Copy link
Author

I've commented on the other case, too. I do not need this big solution with per widget configuration for now. I need to be able to use the users token_auth to login to all widgets.

If I read the other case token_auth should already work with widgets.

Therefore this case seems to be a bug report.

@robocoder
Copy link
Contributor

Ok, this was disabled in #235 by [576] where token_auth access was too broad.

The current rationale is that we should not expose token_auth as that could allow a visitor to handcraft a URL to view any enabled plugin's widget(s).

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug For errors / faults / flaws / inconsistencies etc. Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it.
Projects
None yet
Development

No branches or pull requests

2 participants