I tried to embed the whole superset behind a nginx ssl proxy and a apache httpd as a microservice controller via iframe in frontend.

Could not get it working by proxying by url like /superset/ even with all cookies, headers, prefix and networks properly set in a docker environment. Would interfere with other urls all the time.

What did the trick was to remove nginx and give httpd and the other micro services ssl directly on board.

It required me to install flask-cors. Then setting the "HTTP_HEADERS = {'X-Frame-Options': 'ALLOWALL'}" also starting it with gunicorn instead of superset itself.

But boy did I wrap my head around this.. lost 2 weeks nearly.