If I want to embed the metabase with my application, provided that is that secure…cause putting the secrete token in the code is not safe as per my knowledge… Please let me know how can I hide it from the end user means I can keep it in server side…
Hi @hoshang
You put the secret token in your server side code, which is not visible to the user.
Have a look at the documentation and examples:
https://www.metabase.com/docs/latest/administration-guide/13-embedding.html
https://github.com/metabase/embedding-reference-apps
I tried embedding the node js framewrok to embed the metabase…metabase was running on localhost:/3000 and node was running on localhost://3001. Showing error "Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘http://localhost:3000’) does not match the recipient window’s origin (‘http://localhost:3001’)"
@hoshang Did you follow the example exactly? It should work without any problems, but I’m guessing you’re doing something differently. I don’t know what you’re trying to do, but only the Enterprise Edition allows for full embedding:
https://github.com/metabase/metabase/issues/12069