C#•2y ago

Blazor WSAM with Cognito Hosted UI issues

Hey there, I'm slightly struggling with getting Blazor WebAssembly to work with Cognito. I created a user pool, but I'm not exactly sure how it's supposed to work with Blazor. I was following this sample repo:
https://github.com/sravimohan/blazor-webassembly-cognito-hosted-ui-sample/tree/main

But it seems to not work, first and foremost the RemoteAuthenticatorView gives:

Refused to display 'https://***.auth.eu-central-1.amazoncognito.com/' in a frame because it set 'X-Frame-Options' to 'deny'.

Refused to display 'https://***.auth.eu-central-1.amazoncognito.com/' in a frame because it set 'X-Frame-Options' to 'deny'.

Refused to display 'https://***.auth.eu-central-1.amazoncognito.com/' in a frame because it set 'X-Frame-Options' to 'deny'.

Refused to display 'https://***.auth.eu-central-1.amazoncognito.com/' in a frame because it set 'X-Frame-Options' to 'deny'.

but then it redirects me to their actual UI, where if I try to log in, I come back with login failed to my website. I'd love to not bother you guys with this, but I'm not even sure how this thing is supposed to work (I come from Blazor Server).

GitHub

GitHub - sravimohan/blazor-webassembly-cognito-hosted-ui-sample: Sa...

Sample Blazor Web assembly project Using Cognito Hosted UI Authentication - sravimohan/blazor-webassembly-cognito-hosted-ui-sample

TeBeCo•4/29/24, 5:26 PM

i'm guessing, that for good reason, you're not allowed to put amazoncognitoamazoncognito in iframe

TeBeCo•4/29/24, 5:28 PM

In case someone else is looking for this: it turns out cognito will run in an iframe if you set the iframe's document.domain to amazoncognito.com. Of course, then the underlying resource that you're trying to load must run inside the iframe with that domain. If that underlying resource uses cookies, they won't work if 3rd party cookies are disabled on the user's browser.

TeBeCo•4/29/24, 5:28 PM

found that using google

TeBeCo•4/29/24, 5:29 PM

don't seem ideal at all either regarding how cookie works

TeBeCo•4/29/24, 5:29 PM

https://stackoverflow.com/questions/46149225/Amazon-cognito-hosted-ui-impossible-to-iframe

Stack Overflow

Amazon Cognito hosted UI impossible to iframe?

I tried, but in headers X-Frame-Options: deny and I do not found any way to configure this inside backend UI.

TTeBeCo > In case someone else is looking for this: it turns out cognito will run in an ...

ReseOP•4/29/24, 5:49 PM

But would that work with third-party cookies? Because the iframe seems to fail, but then the user gets redirected to the Cognito UI URL, it's only once they're redirected back that I get an error saying there was an error, although I don't know what exactly the cause is. However, chrome dev tools issues mention third-party cookies

ReseOP•4/29/24, 5:49 PM

I mean sure I'll give it a shot but I don't think that will help (also I've seen that thread before and skipped it for this very reason)

Blazor WSAM with Cognito Hosted UI issues

Similar Threads

Similar Threads

Similar Threads