IdPv3 FlowExecutionRestorationFailureException

[Cantor, Scott]

On 7/2/15, 11:31 AM, "users on behalf of Etienne Dysli-Metref" <users-bounces at shibboleth.net on behalf of etienne.dysli-metref at switch.ch> wrote:
>
>So it's just a HTTP request that shouldn't happen, right?

I don't think it's fair to say the back button shouldn't happen, it's fair to say that the worst thing about SWF is that it provides no practical way to tackle it given all our other constraints. I'm not happy with it, but I don't know what to do about it.

>I think it would help IdP operators to remove such "errors that aren't
>really errors" from the log so they can really worry when they see
>"ERROR" there.

The log will always be full of errors from browsers dropping connections and such. It's virtually impossible to get the log that clean without a lot of filtering unfortunately. Possibly less so if you front-end the container with something, I'm not sure about that.

>Seeing the actual HTTP request would help telling whether it's a valid
>request for the IdP or not.

I don't think you'd see anything unusual at all.

-- Scott