Resolving GeoGebra Notes Integration Issue: Camera Access in iFrames

[dj4oC]

Background:

We are integrating GeoGebra Notes as an external app into ownCloud Infinite Scale. During testing, it was identified that the camera functionality does not work as expected. The issue stems from the missing allow="camera" attribute in the <iframe> where GeoGebra Notes is loaded.

Technical Context:

The relevant code can be found here:
App.vue Line 2-8

To enable camera functionality in GeoGebra Notes, we need to modify the allow attribute of the <iframe> tag to include camera. This change ensures that the browser grants the required permission to GeoGebra Notes for accessing the camera.

Action Plan:

1. Update Code:
   Add allow="camera" to the iframe in the App.vue file of the web-app-external package.

<iframe
  :src="app.url"
  :sandbox="app.sandbox"
  allow="camera"
  frameborder="0"
  class="web-app-external"
></iframe>

2. Testing:

• Verify that the camera functionality works as intended in GeoGebra Notes after applying the change.
• Test the impact of adding the camera attribute on security and compliance policies.
• Ensure other iframe functionalities are not adversely affected.

[kobergj]

Thank you chatGPT! Maybe it would be even better to use a parameter instead of allowing camera everywhere. But that depends on how much work that would be.

[LukasHirt]

@kobergj to make this configurable, it would make most sense to have it configurable in oCIS and then Web would only read and use the config accordingly. Reason for that: the external apps are loaded via API call into oCIS, not a Web config. So it would be simply about keeping the information together. And e.g. secure_view config already lives there.

However, since that would increase the effort, should we do that or simply go with "allow always" solution?

[kobergj]

Yes let's go with the simple solution for now. Probably no one will ever complain about it 👍

[dj4oC]

Reopened. Unfortunately it still does not work. Same behaviour as before. Happy to make a screen sharing session.
@kobergj @LukasHirt

[LukasHirt]

@dj4oC I would need to see whether there is any error output in the browser console.