resumeToken is ignored

[igor-afterlogic]

We’re integrating RocketChat in our application. We were able to use the Iframe authentication approach, but it’s not exactly perfect for our needs, ideally we need authToken transmitted in the URL when opening RocketChat tab/window.

We’re getting authToken via REST API, and we’ve attempted to use resumeToken approach mentioned at:

Authentication

But that doesn’t seem to work, we’re only getting a login page. We’re able to log in using the same token by entering this in console:

localStorage.setItem('Meteor.loginToken', '...');

So the token itself looks valid. Are we maybe missing a configuration option to enable the use of resumeToken?

We’d highly appreciate all the help.

[john.crisp]

@igor-afterlogic

ideally we need authToken transmitted in the URL when opening RocketChat tab/window.

Hi.

Isn’t that effectively a GET? I’m not sure that is very secure?

I think most API calls require a POST for security?

Someone may pop along later with some more info.

[Julien]

We have been experiencing the same issue here after upgrading to Rocketchat 4.0. resumeToken does not seems to work anymore! We were using this parameter to authenticate to the iframe after querying the login endpoint.
As a consequence, this breaks the integration we have made around the Rocketchat embedded iframe.

Any help would be highly appreciated.
Thank you