Devise sign-in not working in IE through an iframe

Question

I don't see any error messages in the log file, and there is no message on the screen. Logging in to my Rails 3 app as it is served up in an iframe from another site results in being returned to the main site without the user being logged in.

It sounds like the Rails app is not recognizing the cookie through the iframe. Has anyone else run into this problem? Where could I go to see what the error is?

Please note this ONLY occurs in IE, version 8 (maybe it occurs in 7 and 6, haven't tested yet).

Answer 1

James is correct, IE has some security in place to prevent iFrames from generating cookies. There's an easy fix for this, simply include the following response header into your controller:

response.headers['P3P'] = 'CP="NON DSP COR CURa IVAa IVDa CONa OUR NOR STA"'

Source: http://adamyoung.net/IE-Blocking-iFrame-Cookies