javascript - ajax call to timed-out cas-protected server: ajax redirection problem -

-

our web server uses cas single sign on. cas server running jasig cas server on https://portal.ourdomain.com , web server running rails on http://service.ourdomain.com.

the rails server has session timeout set low single sign-out backup measure , other reasons. occasionally, users redirected portal.ourdomain.com reauthentication. seamless since portal.ourdomain.com redirects them service.ourdomain.com updated ticket cookie unless cas session has expired.

however, doesn't work ajax. web browsers not follow redirects xhr requests, if domain same.

one obvious solution serve https://ourdomain.com , stop subdomain nonsense. extensive operation , require serving through https.

another solution regularly ping server never times out. besides increased load on server, having pages never time out defeats purpose of having timeout in first place.

which leads third, crappy solution: remove timeout.

how overcome cross-domain issues ajax calls cas-protected resources? similar question unanswered, question appears broader, hope there's answer our question.

does have solutions problem don't suck?

you can wrap ajax xhr requestwhendoing revalidation, browser can understand redirect. need change code cas proxy. "work around must checked , extended (in worst case) every kind of ajax web framework. did jquery, gladly ajax base rails3.


Comments

Post a Comment

Popular posts from this blog

objective c - Change font of selected text in UITextView -

-
can suggest me how change font of selected text in uitextview.i cannot use uiwebview since have edit text. have seen pages app.how possible in app. see formatting text within uilabel differently . since need editing, should @ javascript-based editors such ckeditor or tinymce . highly recommend wwdc 2011 video session 511: "rich text editing in safari on ios."
Read more

php - Accessing POST data in Facebook cavas app -

-
so i've got simple form in canvas / iframe facebook app, , i'm trying pass along values post. reading on s.o. , fb's latest docs, understand it, data send via post form can accessed on receiving end $_request object. i read on thread on s.o. in order post forms work need pass along input named "signed_request" value current signed_request (i have signed request working ok otherwise...all login , authentication stuff working fine). isnt mentioned anywhere in official fb docs. so problem comes in $_request object signed request, , bunch of other session stuff. form inputs found. the way can read them set method of form "request" isn't real form method. takes of inputs , sends them args in url. horrible. here's sample page canvas app form i'm using try debug (leaving out authentication stuff): <form enctype="application/x-www-form-urlencoded" method="post" target="_top" id="my_form" action=...
Read more

c# - Getting control value when switching a view as part of a multiview -

-
i have following code in aspx page: <asp:button id="display_button" runat="server" text="display" onclick="button1_click" /> &nbsp; <asp:button id="edit_button" runat="server" text="edit" onclick="button2_click" /> &nbsp; <asp:button id="save_button" runat="server" text="save" onclick="button3_click" visible="false" /> &nbsp; <asp:multiview id="multiview1" runat="server" activeviewindex="0"> <asp:view id="view1" runat="server"> <asp:formview id="view_program" runat="server"> <itemtemplate> <%# eval("status").tostring().trim() %> </itemtemplate> </asp:formview> </asp:view> <asp:view id="view2" runat="server"> ...
Read more