I just tried to do what you offer here, except that I do not have a hyperlink inside the iFrame. I want the Google authentication page to appear in the iFrame on top of my page, rather than being redirected to the authentication page, and then coming back to my page. I also add a query string to login_url, and my main request then returns a simple “Welcome” message, not the main page of the application.
It works great in the sandbox, but when deployed to GAE it doesn't work. The page returned by Google login_url is not displayed in the iFrame. The console message "Failed to display the document because the display is prohibited by X-Frame-Options." I thought of possible workarounds, but Google clearly does not want the login page to display in this way. I am disappointed because my application uses HttpRequests heavily, so the main page is never updated otherwise, but I am still very pleased with GAE.
source share