Issue Summary

We are trying to embed the entire Redash application into a custom website but have not been able to successfully login. The embedded Redash properly loads the login page, but after entering credentials the user is redirected to the same page (login). Our suspicion is that that there are certain environment variables preventing the ability to login successfully but we have yet to determine the correct configuration of them.

Other points of note:
-The applications are deployed using different hosts and we prefer this approach
-When the applications are running on the same server (a virtual machine using separate ports), the embed application functions properly and the user can login
-We are embedding using an iframe
-The login request returns a successful response, but we are redirected back to the login page

A summary of the issue and the browser/OS environment in which it occurs.

Technical details:

  • Redash Version: redash/redash:8.0.0.b32245
  • Browser/OS: Chrome - up to date version 90.0.4430.93 (Official Build) (64-bit)
  • How did you install Redash: Setup command using docker compose
    *Environment variable we’ve configured or changed:
    REDASH_FRAME_OPTIONS=
    REDASH_CONTENT_SECURITY_POLICY=

Redash very specifically does not support this. It’s been tried a few times without success. CORS doesn’t like it. Recent changes in Google Chrome have made it even harder to embed completely. I don’t think you’ll be able to make this work.