Hi everyone, I'm currently attempting to do silent authentication with ory in an iframe. My idea is to re-use the same login session for the user and get new access tokens as I do not want to store the refresh tokens on the frontend. However, i get the server response

X-frame-options; Deny

and this means I can't do re-authentication with iframe. When I simply do

window.href = authUrl

, it works as expected and redirects me back to my app because the session is still active. Is there a way to allow iframes within Ory?

read more here @elegant-plumber-79804 https://www.ory.com/docs/troubleshooting/iframes short answer is: don't use iframes to embedd identity flows in 2025

okay. thanks.