# Perspective Session IFrame Bad Request Loop

**URL:** <https://forum.inductiveautomation.com/t/perspective-session-iframe-bad-request-loop/75697>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [June 29, 2023, 11:49am UTC](https://forum.inductiveautomation.com/t/perspective-session-iframe-bad-request-loop/75697 "2023-06-29T11:49:06Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Starlyn\_Olivero](https://avatars.discourse-cdn.com/v4/letter/s/c5a1d2/32.png) [@Starlyn\_Olivero](https://forum.inductiveautomation.com/u/Starlyn_Olivero)\
**Post date:** [June 29, 2023, 11:49am UTC](https://forum.inductiveautomation.com/t/perspective-session-iframe-bad-request-loop/75697/1 "2023-06-29T11:49:06Z")

</div>

Hi,

I currently trying to **IFrame** a perspective session from a separate server where the gateway is running.

Ignition 8.1.25 with a **self-signed**  **certificate**.  
Ignition default IdP.

Gateway settings  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/d/3dcc27ec3e20d8d008cb4e7edd4640c1015741cd.png)

Perspective Project specific Settings  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/f/0f969be88692af0df5be9f4d981204dc9214dc69.png)

Initially, we couldn’t see the login page when launching the URL. I updated the **ignition.conf** file and added the lines based on some suggestions found here:

- _wrapper.java.additional.2=-Dignition.http.header.x\_frame\_options.enabled=false_
- _wrapper.java.additional.3=-Dignition.http.header.x\_content\_type\_options.enabled=false_
- _wrapper.java.additional.4=-Dignition.http.header.x\_xss\_protection.enabled=false_
- _wrapper.java.additional.5=-Dignition.http.header.referrer\_policy.enabled=false_

Now, we see the login page but when we click the login button Ignition goes into **an infinite loop of bad requests**.

 ![bad_request](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/7/5785e5e4065bc99e12074fa9e2747538ba9b4345.png)

Any suggestions?

---

<div class="post-metadata">

**Author:** ![victordcq](https://avatars.discourse-cdn.com/v4/letter/v/f6c823/32.png) [@victordcq](https://forum.inductiveautomation.com/u/victordcq)\
**Post date:** [June 29, 2023, 12:02pm UTC](https://forum.inductiveautomation.com/t/perspective-session-iframe-bad-request-loop/75697/2 "2023-06-29T12:02:33Z")

</div>

iframes have a ton of security that is hard to control, especialy when you try to open https sites

a 400 usualy indicates that you did something wrong with the request