generated from cfpb/open-source-project-template
-
Notifications
You must be signed in to change notification settings - Fork 20
Open
Labels
Description
We needed to change checkLoginIframe to false due to CORS issues now related to trying to access an iframe from another domain...

... and probably future problems with it as cookies get more locked down based on some digging through keycloak docs and issues. Take a look at issue 23872 on the keycloak repo (avoiding a direct link to the issue so we're not linked into it) for more info on that.
There are some downsides to not having it, particularly if someone logs off in another tab then it might not auto-detect the log out. Having said that, Kenneth's PR that implements it has been on hmda beta side for almost a year without complaints. I made an issue to follow up and investigate re-enabling it or ameliorating any issues down the line.
Reactions are currently unavailable