Fix Google Sign-In popup

mikejac · Feb 8, 2022 · dd2754f · dd2754f
1 parent a1ae8fa
commit dd2754f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/SmartHome.js b/lib/SmartHome.js
@@ -90,7 +90,10 @@ class GoogleSmartHome extends Aggregation(Auth, Devices, HttpAuth, HttpActions)
         if (httpsPort > 0) {
             // create express middleware
             this.app = express();
-            this.app.use(helmet());
+            this.app.use(helmet({ 
+                // opener policy required for Google Sign-In popup
+                crossOriginOpenerPolicy: { policy: "same-origin-allow-popups" }
+            }));
             this.app.use(cors());
             this.app.use(morgan('dev'));
             this.app.use(express.json());