I want to integrate a third party service that requires authentication into a Maestro form. I can't use an iframe as the service uses X-Frame-Options header. I've got it working with
from the Maestro API. But its not a great user experience; the user has to manually switch back to the form tab when done, and press a button to refresh the status of authentication. I tried to setup polling on the status, ran into CSP issues. What's the best practice here? The owners of the third party service suggest a model like
Are we OK doing this in an Avoka form?
I resolved this in the end by using a solution similar to the polling example in the answer here:
Popup blocking needs to be turned off. Works ok in desktop browsers and Safari in iOS
Have you tried managing the CSP settings on Manager?
Managing Content Security Policy (CSP) Settings
Thanks Ben Warner. In this case, the CSP errors I was seeing were die to me doing something stupid. But thanks for the tip. Another feature of TM that I didn't know about
That sounds like something that should be done in a Groovy service in TM, rather than in the form itself.
Thanks Bill Frost. The credentials for the service come from the user, so that is not appropriate in this case