Bugs

SSO Popup Remains Open After Completion

2mo agoCompleted

Issue with SSO popup

SSO completes successfully, but the popup remains open and the originating board does not update until refreshed. Your board opens /auth/sso/init with window.open() and the completion page relies on window.opener.postMessage(). Our authentication pages return Cross-Origin-Opener-Policy: same-origin-allow-popups, which can sever the opener during the cross-origin navigation. Is there a supported same-window redirect mode, or can the SSO completion flow avoid relying exclusively on window.opener?

3 comments

  1. Shayan Taslim marked this as Completed2mo ago
  2. Hi Benjamin, this is now fixed. SSO no longer relies on `window.opener`, so it works with your COOP headers. After sign-in, the popup closes and the board updates automatically without a refresh. No changes are needed on your side.

    Give it a try and let me know what you think!

    1. Fab, thanks. This immediately removes friction for our users.

    2. glad to hear!

  3. Shayan Taslim marked this as In Progress2mo ago