Oracle Process Cloud Workspace is a web application that a user uses to interact with human activities in BPMN processes. It is a stand-alone web application in Oracle Integration Cloud Service (OICS). In some use cases, customers want to embed the Workspace application in an iframe of their own web page. Out of box, this is not possible because all HTTP responses from the Workspace have an X-Frame-Options header set to “sameorigin”. It does not allow browsers to embed response data into an iframe from a different domain.
This post demonstrates a work-around solution to this problem by using a proxy server. The idea is to use a proxy server (OHS or Apache) to remove or modify the X-Frame-Options header from all responses from the Workspace.
Demo Environment
My demo environment, shown in the image below, includes an OHS server installed on localhost:7777. I have my OICS instance running on a VM. I have a simple test web page with an iframe installed on the OHS.
Check the Problem First
Let’s verify the problem exists first. The following two screen shots show the Workspace accessed directly without the proxy. Read the complete article here.
Jürgen Kress is a member of the product management team responsible for Oracle’s integration and digital assistant partner business. He is the founder of the Oracle Integration and Developer Partner Communities, and the global Oracle Partner Advisory Councils. The PaaS & Middleware Partner Community is home to over 6,000 members internationally as Oracle’s most active and successful community, which Jürgen manages with monthly newsletters, webcasts, and conferences. He also hosts the annual PaaS & Middleware Partner Community Forums and PaaS & Middleware Summer Camps, where hundreds of partners receive product updates, roadmap insights, and hands-on training supplemented by a variety of Web 2.0 tools like Twitter, discussion forums, online communities, blogs, and wikis.