<div dir="ltr">I've got no clue what the value should be, tried to search on Google, but doesn't make much sense to me.</div><div class="gmail_extra"><br><div class="gmail_quote">On 14 April 2016 at 15:30, Jukka Sirviö <span dir="ltr"><<a href="mailto:Jukka.Sirvio@mipro.fi" target="_blank">Jukka.Sirvio@mipro.fi</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">there is discussion on this issue, also on stack overflow<br>
<a href="http://stackoverflow.com/questions/32120129/keycloak-is-causing-ie-to-have-an-infinite-loop" rel="noreferrer" target="_blank">http://stackoverflow.com/questions/32120129/keycloak-is-causing-ie-to-have-an-infinite-loop</a><br>
<br>
“Header always set P3P "CP=ALL DSP COR CUR ADM PSA CONi OUR SAM OTR UNR LEG"”<br>
<br>
<br>
Lähettäjä: <a href="mailto:keycloak-user-bounces@lists.jboss.org">keycloak-user-bounces@lists.jboss.org</a> [mailto:<a href="mailto:keycloak-user-bounces@lists.jboss.org">keycloak-user-bounces@lists.jboss.org</a>] Puolesta Thomas Raehalme<br>
Lähetetty: 14. huhtikuuta 2016 16:22<br>
Vastaanottaja: Stian Thorgersen<br>
Kopio: keycloak-user<br>
Aihe: Re: [keycloak-user] JavaScript client, iframe and IE<br>
<div><div class="h5"><br>
I created KEYCLOAK-2828 for this issue and will do a PR as well.<br>
<br>
What do you think the value should be? As I wrote earlier it does not seem to make a difference to IE.<br>
<br>
Best regards,<br>
Thomas<br>
<br>
<br>
On Thu, Apr 14, 2016 at 4:16 PM, Stian Thorgersen <<a href="mailto:sthorger@redhat.com">sthorger@redhat.com</a>> wrote:<br>
Can you create a JIRA for it please? If you fancy doing a PR you can add the header to LoginStatusIframeEndpoint.<br>
<br>
On 14 April 2016 at 15:09, Thomas Raehalme <<a href="mailto:thomas.raehalme@aitiofinland.com">thomas.raehalme@aitiofinland.com</a>> wrote:<br>
On Thu, Apr 14, 2016 at 4:01 PM, Stian Thorgersen <<a href="mailto:sthorger@redhat.com">sthorger@redhat.com</a>> wrote:<br>
What do you mean about "if the URL is something like"?<br>
<br>
The only iframe Keycloak uses is in the JavaScript adapter and it's only the session iframe. That would be the only place it would be relevant for Keycloak to set P3P header, but don't think it's need AFAIK it works just fine on IE.<br>
<br>
Sorry for being a little too vague.<br>
<br>
Among other UIs our application has a web front-end based on AngularJS and it's utilizing the JavaScript adapter for authentication. When I login to the application I can inspect the HTML and see an <iframe /> element with the following URL:<br>
<br>
<a href="https://keycloak-server/auth/realms/xxxx/protocol/openid-connect/login-status-iframe.html?client_id=xxxx&origin=xxxx" rel="noreferrer" target="_blank">https://keycloak-server/auth/realms/xxxx/protocol/openid-connect/login-status-iframe.html?client_id=xxxx&origin=xxxx</a><br>
<br>
Without the P3P header there is an eternal loop between our web front-end and Keycloak where the browser is being redirected from one to the other. After adding the P3P header the problem was solved.<br>
<br>
Best regards,<br>
Thomas<br>
<br>
<br>
<br>
</div></div>________________________________<br>
<br>
Tämä sähköpostiviesti (liitteineen) saattaa sisältää luottamuksellista tietoa, joka on tarkoitettu<br>
vain vastaanottajalleen. Jos et ole oikea vastaanottaja, ilmoita viestin lähettäjälle tapahtuneesta<br>
virheestä ja tuhoa viesti välittömästi. Viestin luvaton julkaiseminen, kopioiminen, jakelu tai muu<br>
käyttö tai toimenpiteisiin ryhtyminen sen perusteella on ehdottomasti kielletty.<br>
<br>
This message (including any attachments) may contain confidential information intended for<br>
the person or entity to which it is addressed. If you are not the intended recipient, notify the<br>
sender and delete this message immediately. Notice that disclosing, copying, distributing or any<br>
other use of the message and its information, or taking any action based on it, is strictly prohibited.<br>
<br>
________________________________<br>
</blockquote></div><br></div>