Iframe, not letting my customers to check the demo version.

Envato Authors Code Authors
4

Hi @kamleshyadav,

I’ve had a look, and appears that your site is reacting to the login differently when under the iframe and not.

With the iframe:

  1. Click login
  2. An XHR POSTs the credentials to https://pixeltalk.node.pixelnx.com/ and returns a 200
  3. A GET is made to https://pixeltalk.node.pixelnx.com/dashboard/, which returns a 302 to /
  4. A GET is made to /, which returns a 200 and the login form.

Without the iframe:

  1. Click login
  2. An XHR POSTs the credentials to https://pixeltalk.node.pixelnx.com/ and returns a 200
  3. A GET is made to https://pixeltalk.node.pixelnx.com/dashboard/, which returns 200 and the logged-in content.

I’m not sure why the behavior is different here – it could be due to the Set-Fetch headers your XHR is sending:

sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin

Check your server-side application and perhaps add some logging. Find out under what conditions the request to /dashboard returns a 302 response, and you should have your answer.