adimyth commented on issue #22258: URL: https://github.com/apache/superset/issues/22258#issuecomment-1333387931
> The first thing to try would be to remove ALL the allowed domains and leave the field empty. > > Background: The allowed domains field is _incorrectly_ labeled in the UI. What this field does is to check the "Referer" header and compare it against the values in this field, which is IMO a bit awkward. > > Relevant discussion in Slack. https://apache-superset.slack.com/archives/C01EP56QGTS/p1663143592850569?thread_ts=1663071066.037159&cid=C01EP56QGTS > > If that doesn't help, the next step is to investigate the Guest permissions configuration. Adding the following in `superset_config.py` seems to be working for me - ```python # Dashboard embedding GUEST_ROLE_NAME = "Gamma" GUEST_TOKEN_JWT_SECRET = "test-guest-secret-change-me" GUEST_TOKEN_JWT_ALGO = "HS256" GUEST_TOKEN_HEADER_NAME = "X-GuestToken" GUEST_TOKEN_JWT_EXP_SECONDS = 300 # 5 minutes ``` I shall test this out & revert! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
