flowExecutionKey

[Cantor, Scott]

On 7/3/14, 1:35 PM, "Nate Klingenstein" <ndk at internet2.edu> wrote:

>I guess I'd like to understand at least -why- there is a flow exception,
>because I think both POST-initiated form-based authentication and
>htmlunit are both reasonably widely used and I don't think this script is
>doing anything particularly unusual.

I would too, but the cause of the exception is a failure of the script.
Otherwise a browser wouldn't work. If you get a Decode failure, that means
it's not getting a flow key to attempt to use. If you get the
FlowRestorationException, that's a failure of the key itself to be valid.

>The squelched exception might be obvious and expected behavior for the
>developers, but it might not be intuitive for deployers.

The back button exceptions are squelched because if you don't, you get the
V2 log, filled with noise. Whether we ship it that way is a different
question, but everybody in production will run with it off, or the log
will be useless, as it mostly is today.

-- Scott