Applications that autorefresh

[Cantor, Scott]

On 7/16/12 8:44 PM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
wrote:
>
>But I think the idea is reasonable; detect that the user doesn't have a
>valid login context and do something for them. It might just direct them
>to a big page of links, but even that is better than an ugly error message
>they don't understand.

I certainly agree that it needs to be a customized result. I don't think I
was able to actually pick up that error condition by itself,
unfortunately, but assuming it's possible, the other problem is that since
it would show up as part of the back button stream, I prefer to get all
those pages reporting a consistent friendlyish error so that the user sees
the same thing until they back up far enough.

The back button case swamps all the other times that the various
conditions it leads to show up on their own (replay, stale message, no
login context, empty profile request, etc.)

-- Scott