I am struggling on how to expose lightning apps in force.com sites

As per one of the answers in this link I should be able to expose lightning apps on force.com sites :

Expose Lightning .app publicly?

I get a 500 error when the site accesses the lightning app. The same app renders fine on the visualforce page. What am I missing here?

Is it even possible to expose a lightning app through a public sites without authentication? enter image description here

Lightning App:

<aura:application extends="ltng:outApp" implements="ltng:allowGuestAccess" access="GLOBAL">
        <aura:dependency resource="c:caseSearchComponent"/>

VF Page used in force.com site:

 <apex:page sidebar="false" showheader="false">
<apex:includeLightning />
<div id="lightning" />

    $Lightning.use("c:Lightningappforsite", function() {
      function(cmp) {
        // do some stuff


Output of component inside the VF Page: enter image description here

Looking further in the console i see invalid session, looks like salesforce is expecting authentication to access the lightning component.

Console shows invalid session when i try to look at the raw request:

while(1); {"defaultHandler":"function(token) {try{$A.clientService.invalidSession(token);}catch(e){window.location.reload(true);}}","event":{"descriptor":"markup://aura:invalidSession","attributes":{"values":{}},"eventDef":{"descriptor":"markup://aura:invalidSession","type":"APPLICATION","xs":"I","superDef":{"descriptor":"markup://aura:applicationEvent"},"attributes":{"newToken":{"name":"newToken","type":"aura://String","xs":"I"}}}},"exceptionEvent":true}

  • 6
    Can you post your lightning app code? Make sure you have added the extends="ltng:outApp" implements="ltng:allowGuestAccess" in your application definition
    – Sam
    Commented Jun 14, 2017 at 5:06
  • @anamadeya i did have the ltng:outapp and allowguest set on the app. Look at the upated code
    – Swathi
    Commented Jun 14, 2017 at 5:51

3 Answers 3


This worked for me I Implemented implements="ltng:allowGuestAccess" in my app, and after adding the dependency resource I called my component.


<aura:application access="GLOBAL" extends="ltng:outApp" implements="ltng:allowGuestAccess">
    <aura:dependency resource="c:Validar_Pedido" type="COMPONENT"/>
    <c:Validar_Pedido />

This may not be the answer for you, as I can't confirm for myself, but I thought it may be helpful to add as an answer.

First the release doc states that:

The ltng:allowGuestAccess interface is only usable in orgs that have Communities enabled, and your Lightning Out app is associated with all community endpoints that you’ve defined in your org.

What is the end point you are using? The release doc also states:

This code is standard Lightning Out, with the important addition that you must use one of your org’s community URLs for the endpoint.

The release doc has this example, the endpoint is at the end of the script:

    $Lightning.use("c:locatorApp",    // name of the Lightning app
        function() {                  // Callback once framework and app loaded
                "c:storeLocatorMain", // top-level component of your app
                { },                  // attributes to set on the component when created
                "lightningLocator",   // the DOM location to insert the component
                function(cmp) {
                    // callback when component is created and active on the page
        'https://universalcontainers.force.com/ourstores/'  // Community endpoint
  • Do you man to say i need to have communities enabled to expose lightning apps on force.com sites? I do not know what to use as an endpoint to start with
    – Swathi
    Commented Jun 14, 2017 at 7:12
  • Yes just re-read and it clearly states that ltng:allowGuestAccess interface is only usable in orgs that have Communities enabled - I have added to my answer.
    – Girbot
    Commented Jun 14, 2017 at 7:16
  • when I add in my community URL as endpoint I get 500 response on the community. It seems impossible to expose the lightning app on a public site without authentication :(
    – Swathi
    Commented Jun 14, 2017 at 18:02
  • Hmm. Not sure what is different but I am able to use ltng:out in a force site without communities
    – Eric
    Commented Sep 26, 2017 at 2:44

You should be sure about all objects and pages and classes are added to Site Public Access Settings.

On Setup \ Sites > click label of your site on the list.

Your site page opens, and click "Public Access Settings" button.

Here all permissions should be set. First edit and give permissions for all related objects, and then add your all related classes to Enabled Apex Class Access and add all related VF Pages to Enabled Visualforce Page Access list.

Then your component should work.

Hint: Dont add your component inside apex:form it causes dropdown menus to refresh all pages when click to open.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .