Organizr: iFrame: "ancestor violates the following Content Security Policy directive"

[that1guy]

If the user logs into organizr, but they area not already logged into plex, then the iframed plex app plex.mydomain.com redirects to a new login page at http://app.plex.tv. This new login page has a header that disallows it to be embeded in an iframe. e.g. The user cannot get into plex once signed into Organzir.

Does reverse proxying the plex application through nginx allow me to solve this? If so, can someone please send plex reverse proxy settings? I haven't been able to get mydomain.com/plexto work.. which is why I've been loading plex through my subdomain.

[Roxedus]

This is a known issue, there is nothing we can do(without getting some pitchforks). Cause have been in contact with the developers, and got a build that was "working"(opening a new window instead of a redirect). Maybe @causefx can update us on the situation(even notify users on readme.md).

[Starbix]

This was fixed in PMS 1.9.2 but stopped working again in 1.9.3. Plex is aware of this problem

[that1guy]

Since Organizr is (probably) signing the user (I use plex SSO) couldn't Organizr just sign them into Plex too, avoiding this whole issue?

[that1guy]

@Starbix Any idea where the plex guys are tracking this issue? I'd like to keep an eye on that. Thanks.

[Starbix]

https://forums.plex.tv/discussion/comment/1532185

[that1guy]

Thanks. I've asked the plex forum where we can formally track this. I see
two alternate solutions, but I'm not entirely sure they are viable.

1) reverse prox PMS and strip the offending headers?

2) determine if there is a way to create a plex.tv browser session for the
user since they used their plex credentials to sign into Organizr anyway?

This seems like an important issue to solve because it really breaks the
entire "first-run" user experience.

Thoughts?

@causefx

On Wed, Oct 11, 2017 at 2:01 AM Cédric L. [e-mail] wrote:

https://forums.plex.tv/discussion/comment/1532185
https://forums.plex.tv/discussion/comment/1532185#Comment_1532185

Von: Brad Davis [e-mail] [e-mail]
Antworten: causefx/Organizr
[e-mail]
[e-mail]
Datum: 11. Oktober 2017 at 07:14:47
An: causefx/Organizr [e-mail]
[e-mail]
CC: Cédric L. [e-mail] [e-mail],
Mention [e-mail] [e-mail]
Betreff: Re: [causefx/Organizr] iFrame: "ancestor violates the following
Content Security Policy directive" (#661)

@Starbix https://github.com/starbix Any idea where the plex guys are

tracking this issue? I'd like to keep an eye on that. Thanks.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/causefx/Organizr/issues/661#issuecomment-335684916,
or mute the thread
<
https://github.com/notifications/unsubscribe-auth/AL3eeZjeE5dcTFpj8lm3_kYsDLKWdonGks5srE7HgaJpZM4Px741

.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/causefx/Organizr/issues/661#issuecomment-335744524,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ABKZfGtSDt0enqqMfqgX6q3cdkaQKlV6ks5srIPygaJpZM4Px741
.

[causefx]

@that1guy I'm confident that Plex will fix this as they previously fixed it and then recently broke it again. I will post again in the forums and send them an email.

[that1guy]

@causefx Okay, thanks for pushing in the right direction.

[causefx]

@that1guy I just emailed Plex's CTO again. I will update once I hear more.

[Starbix]

It's now fixed
https://forums.plex.tv/discussion/comment/1535193#Comment_1535193

[jonfinley]

eh....not seeing it. @Starbix. running 1.9.4.4325 and having the isssue.

[Starbix]

It's fixed in 1.9.5

[causefx]

i replied to that thread.

[that1guy]

Okay, so I'm running 1.9.5 PMS and we're a step closer to the goal, but not quite there I think. Here's a video of what I'm seeing. https://screencast.com/t/IdHjkFnqOcr

Basically:
1) User signs into organizr
2) User is asked to sign into their plex account within an iframe (good!)
3) When user clicks to sign into plex it opens in a new tab where they can then sign in.
4) Then the user should close plex and go back to the organizr tab and refresh. (no good :( )

[that1guy]

Okay, so it seems Plex has resolved this and there is a decent workflow now.

1. User signs into organizr
2. User is asked to sign into their plex account within an iframe (good!)
3. When user clicks to sign into plex it opens in an external tab where they can then sign in.
4. Then the user should close plex and when they go back back to the organizr plex is magically signed in.

I think we can close this. And I've opened up this ticket to discuss how to auto-sign-in to applications once the user is inside Organizr. https://github.com/causefx/Organizr/issues/673