Running a process link from externel page get 403
Confluence User - 06 Oct, 2020
Hi I need help,
Has somebody experience with this topic, I have a process running on Joget W/F Ent. v. 6.0.25 Server at domain-1, and a web page hosted on domain-2 with public access to our help-desk request Form. Actually it's a very simple html page with an iframe src, containing the link to the process hosted on domain-1, as seen below;
<html>
<body>
<iframe src="https://domain-1/jw/web/client/app/gurme_itsr/4/process/gourme_exsr?start=true" frameborder="0" id="my-frame" width="100%" height="800"></iframe>
</body>
</html>
When I load the page :
POST https://domain-1/jw/web/json/plugin/org.joget.plugin.enterprise.AjaxSubForm/service 403 (Forbidden) csrf:104
The Form has Anonymous access rights and can be kicked-off by anyone (public).
When I check the response Header:
HTTP/1.1 403 Forbidden Server: Apache-Coyote/1.1 Access-Control-Allow-Origin: https://domain-1:8443 Access-Control-Allow-Credentials: true Set-Cookie: JSESSIONID=0136D7C05D726C0FCDED53BFD9394F21; Path=/jw/; Secure; HttpOnly Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Date: Tue, 06 Oct 2020 15:11:00 GMT
options 200 OK
service 403
Awaiting your kind advice or how-to solve.
iframe;process;csrf;forms;security