Skip to content

Investigate how to re-enable checkLoginIframe #2624

@billhimmelsbach

Description

@billhimmelsbach

We needed to change checkLoginIframe to false due to CORS issues now related to trying to access an iframe from another domain...
Screenshot 2025-10-08 at 2 04 48 PM

... and probably future problems with it as cookies get more locked down based on some digging through keycloak docs and issues. Take a look at issue 23872 on the keycloak repo (avoiding a direct link to the issue so we're not linked into it) for more info on that.

There are some downsides to not having it, particularly if someone logs off in another tab then it might not auto-detect the log out. Having said that, Kenneth's PR that implements it has been on hmda beta side for almost a year without complaints. I made an issue to follow up and investigate re-enabling it or ameliorating any issues down the line.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions