Unable to Integrate noVNC with Proxmox in iframe or Incognito Tab - 401 Unauthorized Error

[kkworkemail]

Hi Proxmox Community,

I’m trying to integrate the noVNC interface provided by Proxmox into an iframe or access it via an incognito tab. However, I’m encountering a 401 Unauthorized error.

Here’s the URL I’m currently trying to use for VNC access:​

https://<hostip>:8006/?vncticket=<ticket>&port=5900&console=lxc&xtermjs=1&vmid=172&vmname=vnc-test&node=inn-prox&cmd=&PVEAuthCookie=<token>&CSRFPreventionToken=<csrf>

The vncticket is generated using the /vncproxy and /vncwebsocket APIs.
Both the PVEAuthCookie and CSRFPreventionToken are included, but it still results in a 401 Unauthorized error.

My Goals​

1. Integrate the noVNC session with an iframe in my application.
2. Use noVNC in incognito mode or without relying on proxmox authentication.

Questions​

1. Is it possible to directly pass the PVEAuthCookie and CSRFPreventionToken in the URL for VNC access?
2. Alternatively, is there a way to authenticate using a username and password directly in the URL or through an API call that enables seamless access?
3. Are there any other recommended approaches to bypass or correctly handle these authorization requirements for noVNC integration?

Any insights or examples of how others have handled similar scenarios would be greatly appreciated.

Thanks in advance for your help!