Easy!Appointments can't get iframes working correctly due to csrf token. Can't turn off csrf token because config file hidden from File Manager

[plains.digital]

Hullo!
I'm trying to embed a booking calendar from Easy!Appointments into a client's website.
the iFrame will load, but loads with an error pop up, as seen:

Digging through the E!A support group, I discovered that iframes won't work with CSRF. I was advised to remove the check to get around the issue. I hate to lose security features, but I have to make this work, so I attempted to remove the check, but the config.php file that holds it is in application/config/conifig.php, which isn't open in the file manager and thus uneditable by me.

Any ideas? Thanks in advance!

[plains.digital]

Oh, my bad! this has been brought up - just didn't get a happy ending
bummer!

I'm going to have to find a new open-source calendar booking app and request it, I guess.
for now, client gets Calendly

I now wish I'd dealt with this issue BEFORE spending a couple hours sorting out the Google Calendar sync issues! ‍️

[nebulon]

Maybe you can raise an upstream issue with easyAppointments to support more fine-grained CSP settings to allow specific domains for embedding?

[jdaviescoates]

@plains-digital said in Easy!Appointments can't get iframes working correctly due to csrf token. Can't turn off csrf token because config file hidden from File Manager:

I'm going to have to find a new open-source calendar booking app and request it, I guess.

No need, we already have Cal.com which is the best!

I've not started using the Cloudron package yet, but I've been using the hosted service for a while now and it's great!

[plains.digital]

@jdaviescoates my 1st attempt at loading up cal.com crashed and burned (it was still unstable) so i had dismissed it. just tried again and have been configuring it this afternoon.

and you're right. it's the best booking app ive come across, paid or free.
sweet!

thanks for the reminder.

[jdaviescoates]

@plains-digital said in Easy!Appointments can't get iframes working correctly due to csrf token. Can't turn off csrf token because config file hidden from File Manager:

and you're right. it's the best booking app ive come across, paid or free.

It's pretty much the only one that actively supports lots of CalDAV calendars too, which is a must if self-hosting your own calendar. Most only support Big Tech calendar.s Cal.com for the win!