[$150] Unable to log in or sign up to forums

[sdgun]

Steps
Go to https://platform.topcoder-dev.com/forums
Click Log in or sign up(and select any sign up flow)

Shows the error "auth.topcoder-dev.com refused to connect."

Login.and.sign.up.issue.mp4

[jmgasper]

Challenge https://www.topcoder.com/challenges/651cd134-8660-4ef1-b519-ed1939ae723a has been created for this ticket.

This is an automated message for ghostar via Topcoder X

[jmgasper]

@atelomycterus - Can you look at this one please? I'm guessing this is just a config update somewhere?

[jmgasper]

Challenge https://www.topcoder.com/challenges/651cd134-8660-4ef1-b519-ed1939ae723a has been assigned to obog.

This is an automated message for ghostar via Topcoder X

[atelomycterus]

@jmgasper This issue happens due to CSP. If we are using New Universal Login Experience (a customized login page), hosted login page is not possible to render in iframe. Auth0 includes the following HTTP headers to mitigate clickjacking attack:

X-Frame-Options: deny
Content-Security-Policy: frame-ancestors 'none'

These headers blocks iframe rendering(see details https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options)
Please see the screen:

However, it can be turned off for classic Universal login. It should allow the Hosted Login page in Iframe. As described here:
https://auth0.com/docs/product-lifecycle/past-migrations/clickjacking-protection-for-universal-login:
The screen from my local account (https://manage.auth0.com/dashboard/us/dev-bsql5ryd/tenant/advanced):

[jmgasper]

@atelomycterus - Would it be possible to make the link work outside the iFrame instead? Kind of like the "Login" button in the MFE header? I don't think that Topcoder will want to change the Auth0 settings.