Hi @yalcin,
It’s not supposed to work in an iframe. Dynalist is just following the OAuth2 spec, which recommends against allowing login via iframe to prevent click-jacking.
You may find a few services using OAuth2 that allow iframes, but any major company that takes security seriously is going to follow the recommendations and block it.
(Good job, Dynalist
)
Perhaps someone could write an Obsidian plugin to handle the OAuth flow and retrieve the token natively inside of Obsidian.
The plugin would need to open a new browser window and still have you login normally, outside of an iframe. But then you should be able to return to Obsidian and refresh the iframe after login.