Refused to display 'https://www.dropbox.com/1/oauth2/authorize?response_type=code&client_id=m5e… ...

Manjit S.

71%2Fapi%2FAccounts%2FAuthAsync&state=923c0910-4a2d-4a5d-8093-23468959263f' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

I am using dropbox sdk to login with dropbox and access its files now the situation is i need to show that login page in a bootstrap modal so for this i am using iframe but its giving me the following exception.

Refused to display 'https://www.dropbox.com/1/oauth2/authorize?response_type=code&client_id=m5e…71%2Fapi%2FAccounts%2FAuthAsync&state=923c0910-4a2d-4a5d-8093-23468959263f' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

Richard P.

And the exception is correct - you cannot wrap the Dropbox login or authentication screen in that way, it has to be in its own instance outside of your application.

The entire point of forcing you to show the login or authentication screen is to limit the chances that you have of accessing the users credentials - if you do that in an iframe, then you get full access to their credentials as they type them in and submit them, so its not allowed.