Press "Enter" to skip to content

Start Searching the Answers

The Internet has many places to ask questions about anything imaginable and find past answers on almost everything.

Why does it create its own session in iframe?

“because when you click on link in IFRAME that load page as new entity, it doesn’t make any parent child relation between main page and IFRAME pages, that’s why it creates it’s own session and doesn’t use main window’s session.” I would agree with @Harrison and would try the cookie approach.

How to use iframe on a partner site?

: When partner page is loaded, there is iframe and in get parameter token is passed to iframe, like Iframe on load in server side requests new token from the partner site passing as parameter the token which is in url as $_GET parameter.

What do you need to know about cross-domain iframe?

Web application allow list. Web applications that take a dependency on the cross-domain iframe are required to get IT Admin approval for their domain. Administrators will add the source domain of your web application to the company’s list of allowed domains.

Why do you not need to pass token in iframe request?

That way the token in the iframe url get parameter becomes invalid, so even when user see it, he cannot do anything. New token which is received in iframes server is saved in session. So now from client side when client buys and item in iframe, he does not need to pass token in request, because it is in session.

How does session affinity work in JavaScript?

Session affinity is a mechanism to bind (affinitize) a causally related request sequence to the destination handled the first request when the load is balanced among several destinations.

The cookie-based session affinity feature is useful when you want to keep a user session on the same server. By using gateway-managed cookies, the Application Gateway can direct subsequent traffic from a user session to the same server for processing. This is important in cases where session state is saved locally on the server for a user session.

How to perform session based affinity in azure?

The application gateway can only perform session-based affinity by using a cookie. If the application cannot handle cookie-based affinity, you must use an external or internal azure load balancer or another third-party solution.