Your workflow is unique 👨💻 - tell us how you use Dropbox here.
Forum Discussion
Refused to display 'https://www.dropbox.com/1/oauth2/authorize?response_type=code&client_id=m5e…71%2Fapi%2FAccounts%2FAuthAsync&state=923c0910-4a2d-4a5d-8093-23468959263f' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
I am using dropbox sdk to login with dropbox and access its files now the situation is i need to show that login page in a bootstrap modal so for this i am using iframe but its giving me the following exception.
Refused to display 'https://www.dropbox.com/1/oauth2/authorize?response_type=code&client_id=m5e…71%2Fapi%2FAccounts%2FAuthAsync&state=923c0910-4a2d-4a5d-8093-23468959263f' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.
1 Reply
Replies have been turned off for this discussion
Richard P.Super User alumni
And the exception is correct - you cannot wrap the Dropbox login or authentication screen in that way, it has to be in its own instance outside of your application.
The entire point of forcing you to show the login or authentication screen is to limit the chances that you have of accessing the users credentials - if you do that in an iframe, then you get full access to their credentials as they type them in and submit them, so its not allowed.
About Dropbox API Support and Feedback
Get help with the Dropbox API from fellow developers and experts.
