When opening an Operation view from 'My Content' of ArcGIS Online to view in the Operations Dashboard (Browser), I get caught in a redirect loop where the oauth2 login appears, I provide my credentials, the page refreshes, and returns me to the login page. This cycle continues.
The dashboard is not shared publicly which is why I expect be prompted for credentials once.
This occurs everytime I try to open the view in the browser when using the latest version of Chrome. The same seems to happen inconsistently in an incognito window. Fully clearing the browser's cache seems to temporarily solve the issue and the app will load on first attempt. However, after using ArcGIS online some time later, the redirect issue happens again.
In the console I see the following error message:
'ALLOW-FROM https://ontarioregion.maps.arcgis.com' is not a recognized directive. The header will be ignored.
If I modify the URL of my app from https://ontarioregion.maps.arcgis.com/apps/.... to https://arcgis.com/apps/.... and login then it works fine and actually directs me to the dashboard the first time around.
This issue is either exactly the same or very similar to Syntax Error using Chrome to access sign in page.