PhpCAS redirection loop on iframe

Question

I have a request that authenticate with phpCAS and works fine when accessing from url directly (copy past url on browser).

But When i use the same url in Iframe src or in button href i got infinite redirection loop.

any ideas ?

Thanks for help

Answer 1

because when you protect a page using CAS then CAS redirects you to the same url(i.e back url) after authentication so when you are visiting your page then your iframe section sending request to the CAS and it redirects to your main page and then again iframe sends request to the CAS that's why it's getting into infinite loop. for more information about how CAS works you can follow this

Answer 2

Am using cakephp and the problème was that the security module checks the referer and inset the session if it's not from the same host so i get disconnected and reconnected again by cas and home page redirection.

The solution was using custom session handler for cakephp and ignore referer check.