{"action":"closed","issue":{"url":"https://api.github.com/repos/AzureAD/azure-activedirectory-library-for-js/issues/727","repository_url":"https://api.github.com/repos/AzureAD/azure-activedirectory-library-for-js","labels_url":"https://api.github.com/repos/AzureAD/azure-activedirectory-library-for-js/issues/727/labels{/name}","comments_url":"https://api.github.com/repos/AzureAD/azure-activedirectory-library-for-js/issues/727/comments","events_url":"https://api.github.com/repos/AzureAD/azure-activedirectory-library-for-js/issues/727/events","html_url":"https://github.com/AzureAD/azure-activedirectory-library-for-js/issues/727","id":305349796,"number":727,"title":"ADAL.js does not work in a cross-domain iframe","user":{"login":"qz2017","id":4722179,"avatar_url":"https://avatars2.githubusercontent.com/u/4722179?v=4","gravatar_id":"","url":"https://api.github.com/users/qz2017","html_url":"https://github.com/qz2017","followers_url":"https://api.github.com/users/qz2017/followers","following_url":"https://api.github.com/users/qz2017/following{/other_user}","gists_url":"https://api.github.com/users/qz2017/gists{/gist_id}","starred_url":"https://api.github.com/users/qz2017/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/qz2017/subscriptions","organizations_url":"https://api.github.com/users/qz2017/orgs","repos_url":"https://api.github.com/users/qz2017/repos","events_url":"https://api.github.com/users/qz2017/events{/privacy}","received_events_url":"https://api.github.com/users/qz2017/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-03-14T22:20:47Z","updated_at":"2018-03-20T17:37:03Z","closed_at":"2018-03-20T17:37:03Z","author_association":"NONE","body":"We are trying to use adal.js to fetch token for code inside a cross-domain iframe. And it fails.\r\n\r\nBasically the host page is on domainA. The iframe is pointing to a page in domainB. The page in domainB is calling ADAL.js to fetch token. Token is fetched fine. But adal code fails at handleWindowCallback because it is checking on window.parent (which is cross-domain). The offending code is at:  https://github.com/AzureAD/azure-activedirectory-library-for-js/blob/703e560f26de90fef9ae955529605672242c1f71/lib/adal.js#L1321\r\n\r\nIs there a way to work around it by not doing all those window.parent checks?"}}
{"actor":{"display_login":"navyasric"}}