I am trying to get openvidu to work within an iFrame (from a different domain I control).
At first, the openVidu page wasn’t displaying at all, and I got the response header:
X-Frame-Options: SAMEORIGIN
In order to stop getting this response, I made the following changes in the nginx configuration files.
In the file:
/etc/nginx/sites-enabled/default
I Changed:
add_header X-Frame-Options "SAMEORIGIN";
To:
add_header X-Frame-Options "";
This allowed the openVidu page to be displayed in the iFrame.
However, I still cannot connect to a GetARoom call within the iframe.
I get Permission denied in the console:
And get the response header:
X-Frame-Options: DENY
From the openVidu server (wss://mydomain.com:4443/openvidu)
I tried to make the following change in the file:
/etc/nginx/sites-enabled/kms-ov
In which I Added:
add_header X-Frame-Options "";
But that didn’t work.
Is there anything else I can change to run openVidu GetaRoom in an iFrame?
(I’ll use a content security policy, but I would like to get this working first)
Thanks.