TIBCO Spotfire - Mashup web player using different domains - cross-domain

I'm working on create a web site where I need to embed a spotfire dashboard.
I've been researching and I found that I can use a web player but they are not hosted under the same domain name, so I'm getting cross site domain errors.
SecurityError: Failed to read the 'frame' property from 'Window': Blocked a frame with origin "https://stage.domain1.com" from accessing a frame with origin "https://stage.domain2.com". The frame requesting access set "document.domain" to "domain1.com", but the frame being accessed did not. Both must set "document.domain" to the same value to allow access.
Can you please provide me any documentation/experience to fix this situation?

Related

Access intranet URL on SharePoint Online?

In my company we have some internal URLs what we would like to link to in the cloud.
I've created an SPFx web part and try to display an HTML img tag with the URL of http://intranetserver/MyPics/user123/headshot.jpg
but I get
Failed to load resource: net::ERR_SSL_PROTOCOL_ERROR
Is there something I need to do within my web part solution or Azure to allow this access?
You're running into an SSL issue because you're trying to load content from a non-secure URL (http instead of https), not to mention it's from another domain, so cross-domain concerns play into it as well.
The two best choices are:
Upload the image(s) directly to your SPO site, in the default images document library
(or another, more private document library if necessary)
Create an SSL certificate and place it on the internal server that's hosting the images

Display custom page for Forbidden site (Failed instead of 403)

Ok so for multiple reasons, I changed the network settings of an app service so that it cannot be accessed using its .azurewebsites.net url
It works but it displays the default "Forbidden" page. What I would like to do is have it display something like this:
If I can extend it to returning a failed status instead of a 403, that would also be awesome.
Creating custom error pages in cases of 4XX and 5XX errors is not supported out of the box with Azure App Services as of today, but it is a heavily upvoted and requested feature on their UserVoice forum. Please upvote it so the Product Group can prioritize it accordingly.
To work around it, you could use an Application Gateway to create custom error pages instead of displaying default error pages. You can use your own branding and layout using a custom error page.
Custom error pages are supported for maintenance and unauthorized access scenarios, and can be defined both at global and listener levels.
The configuration through Azure Portal and Azure PowerShell is explained in detail in this article: Create Application Gateway custom error pages

CORS issues on Azure Search Service

I’m trying to make a GET request in order to query data from Azure Search service. I am trying to follw this tutorial:https://www.dotnetcurry.com/microsoft-azure/cognitive-search-rest-apis-angular-app
How can I allow my domain to make a successful GET request without being blocked by CORS policy.
Is there a possible way or custom configuration on Azure to allow default sites to bypass this error? I have tried to add the API key as a parameter to the URL but the same problem raised again.
Thank you
You see this message because your browser blocks requests going to host samplecognitive.search.windows.net which is different from the origin localhost. You must tell Azure Search to send back a "Access-Control-Allow-Origin" header including localhost.
In the Overview tab of Azure Search Service go to "Indexes" and click on your index. Then go to "CORS". Add http://localhost:4200 and click "Save".

Power Automate - retrieve an inline Teams image from Microsoft graph

I am attempting to retrieve and save an inline image from a Teams message. I have Power Automate reading the message and retrieving the image url. However, with Power Automate I just get 403 errors.
I am setting authentication in the HTTP GET
I can use graph explorer to get the image, so I know the link is correct. I have created an app with permissions in Azure as shown here
Am I missing a permission or something else?
Are you able to perform the same HTTP request on your machine using some tool like Postman?
Sometimes I have timeout issues with Microsoft Flow HTTP requests due to issues with IP whitelisting. Flow uses different IPs you can check it here and you may need to whitelist it first.

How to solve the error 403 when doing requests?

I have to get data as json from a page. But my issue is that you need to be authenticated to the site to be able to see the page. I have an account on the site and I would like to know how to make the authentication or bypass this to be able to make my request, for the moment I have
urllib.error.HTTPError: HTTP Error 403
And here is the code I've made
import urllib.request, json
url = "https://intra.epitech.eu/planning/"
json_url = urllib.request.urlopen(url)
data = json.loads(json_url.read())
print(data)
The epitech intranet gives access to data only if you are logged in with your epitech account (i'm currently a epitech student building an app linked to the intra).
if you are not logged in to the intra you will get a 403 error (the one you have).
to connect to the intra with your account, you either need to use a autologin link (you can generate one in your intra settings) or register a azure active directory app to be able to log in with office365.
Probably you should use API of this website to get protected data. The fact you have an account does not allows you to get data programmatically.

Resources