Gadget's title and height can't be updated in canvas mode after browser update (Chrome/Firefox)

[Pavel Semenov]

Hi everyone!

After updating Chrome to the latest version (and also in Firefox), a gadget from our plugin started behaving incorrectly in maximized mode on the dashboard.

When we maximize the gadget and reload the page, its title is not set correctly and the height is wrong — it only shows about half its normal size, and the "Save" button is missing.

In the logs, we see errors like:
Invalid auth token received for operation: set_title
Invalid auth token received for operation: resize_iframe

This did not happen before the browser update.
We haven't changed anything in our gadget code for a long time.

Jira version: 10.5.1.

I also found that Atlassian’s built-in gadget Average Age Chart has the same problem — the title and height are updated incorrectly after reloading the page.
You can reproduce it with these steps:

Steps to reproduce:

1. Add the Average Age Chart gadget to a dashboard.

2. Maximize the gadget (click "Maximize").

3. Reload the page.

I’m attaching screenshots before and after the reload.

And see incorrect title and errors in console log.

Thank you in advance for your help!

[Mercy]

This looks like a known regression in the gadget iframe authentication flow introduced by recent browser updates combined with Jira’s legacy gadget rendering in Data Center 10.x. Gadgets rely on cross-window messaging secured by an Atlassian auth token passed to `set_title` and `resize_iframe` operations. With Chrome and Firefox tightening third‑party cookie and postMessage origin handling, Jira’s dashboard iframes sometimes reject those tokens after a reload, leaving the gadget half‑rendered with a missing “Save” button. Atlassian has documented similar issues under gadget authentication in the [Jira platform architecture](