Running the Web Plugin in an iframe

The Web Plugin works inside an iframe. The iframe must be allowed to use the camera, and every page involved must be served over HTTPS and covered by your license.

Quick start

<iframe src="https://your-domain.example/liveness-page" allow="camera"></iframe>

allow="camera" is mandatory, otherwise, the browser blocks camera access, and the plugin cannot start.

Requirements

Requirement	Applies to
allow="camera" on the iframe tag	every iframe in the chain
HTTPS	the parent page and the page with the plugin
Domain listed in your license	the parent page and the page with the plugin
Same origin as the page with the plugin	the parent page – see Parent page on a different domain

If your iframe contains another iframe, each level needs its own allow="camera": the outer page adds it to the iframe holding the wrapper, and the wrapper page adds it to the iframe holding the plugin. A missing attribute at any level blocks the camera for everything below it.

Troubleshooting

Problem	Cause	Solution
The camera permission dialog never appears; on_error receives error_no_camera (error_no_camera_ios on iOS, error_no_camera_android on Android)	An iframe in the chain has no allow="camera"	Add allow="camera" to every iframe in the chain
Connection error. Please use HTTPS to connect.	The parent page or the page with the plugin is served over HTTP	Serve both over HTTPS
License error. Origin https://… is not in the list premitted by license	The domain of that page is not in your license	Contact your Oz representative to add the domain
Check same-origin policy of parent windows. Plugin should check host of each window.	The parent page is on a different origin than the page with the plugin	Contact your Oz representative – this setup needs an additional server-side setting

Parent page on a different domain

The plugin reads the address of every parent window to check it against your license. When the parent page is on a different origin, the browser blocks that read and the check cannot complete. This setup is supported, but it needs an additional setting on the Web Adapter side – contact Oz representative.

If you previously used iframe_allowed

iframe_allowed is no longer used. iframe support is always on, and the requirements above are all that is needed, so just remove the parameter from the Web Adapter configuration file.