cross-origin iframes issue v22.0.1

[jsalguero94]

For bug reporting only! If you're posting a feature request or discussion, please ignore.

Expected Behavior

When open the app should load properly.

Current Behavior

When I install the app the first time it works well. But when I try to reaccess the app,
I'm having a cross-origin error with the console. ref: https://chromestatus.com/feature/5851021045661696

Failure Information

This happens in the fullpage_redirect.blade.php:17

Steps to Reproduce

Please provide detailed steps for reproducing the issue.

1. Install the app
2. open a new tab or a new session
3. Open the app

Context

Please provide any relevant information about your setup. This is important in case the issue is not reproducible except for under certain conditions.

• Package Version: v22.0.1
• Laravel Version: v10.48.23
• PHP Version: v8.2.24
• Template Engine: Blade
• Using a toolset (Docker, Laradock, Vagrant, etc.): Herd

Failure Logs

Please include any relevant log snippets or files here.

[jsalguero94]

A previous PR I opened does not have this issue
#364

[enmaboya]

What needs to be done to cause an error?

[jsalguero94]

When I installed the app the first time it worked, but when I re-opened the app I got the issue.

I'm on macOS 15.0
It happens to me in

• Arc 1.69.0 (55816)
  This is my main browser. I tested it using security: no protection and I got the same error.

• Chrome 130.0.6723.117 (Official Build) (arm64)
  I realized in Chrome I needed to explicitly allow the redirect, otherwise, I get the same error
  

In Firefox (132.0.2 (aarch64)) I don't get the error

[Kyon147]

The full page redirect is needed, it basically has to do a top level redirect so that we can get out of the app to Shopify for OAuth and then Shopify send the user back to the app afterwards.

It's likely something happening with the new way AppBridge is loading.

You can see the official PHP app does something similar/

[Kyon147]

When I installed the app the first time it worked, but when I re-opened the app I got the issue.

I'm on macOS 15.0 It happens to me in

• Arc 1.69.0 (55816)
  This is my main browser. I tested it using security: no protection and I got the same error.
• Chrome 130.0.6723.117 (Official Build) (arm64)
  I realized in Chrome I needed to explicitly allow the redirect, otherwise, I get the same error
  

In Firefox (132.0.2 (aarch64)) I don't get the error

This was a known issue a while back, I can't remember the solve but there is likely an old issue about it.

[Kyon147]

The issue could be relying on open as it needs to have AppBridge v4 loaded which is causing a race condition. I'll revert back this file to use a vanilla approach and see if it happens still.

[Kyon147]

I currently cannot replicate this on the latest version, so can someone else replicate it instead of OP?

[aj-adl]

Hi @Kyon147, just chiming in here as I've been going through the process of setting up a new app, and I ran into this issue as well.

Link to screenshot - https://share.zight.com/yAugPGZ8

Once we allowed the redirects, the app did load, but we got nothing but the blank screen until that happened.

I got the same errors in the console, inspecting everything else, the only thing I noticed that was strange is the "frame ancestors" cache key seemed to be present but virtually empty until I accepted the redirects in chrome and let this work.