Ex: Re: Warning intercept execution order

[Paul B. Henson]

On Wed, Jul 21, 2021 at 01:24:51AM +0000, Cantor, Scott wrote:

> Even if it were possible, it's a terrible idea. An outbound
> interceptor would render a view after the client storage save step.

Why is it a terrible idea? It's exactly what I'm doing now and it works
great. Right before the redirect to the service is issued, my
"Authentication successful, redirecting to service" page is rendered
with a little spinner, and it stays visible until the remote service
responds and generates its own content. It needs to be displayed after the
client storage save step. Otherwise, it acts just like the implementation
I prototyped with the warning intercept, it just flickers by and the
local storage page is the one displayed until the remote service responds
which is what I want to avoid.

> Alternatively, you could just customize that view to start with.

There is no view? The xml says:

    <end-state id="RedirectToService" view="externalRedirect:#{flowScope.redirectUrl}">

My update to the flow under 4.01 adds a view:

    <decision-state id="ReturnToService">
        <if test="flowScope.serviceTicketRequest.method == 'POST'"
            then="PostBackToService"
            else="RedirectNotify" />
    </decision-state>

    <view-state id="RedirectNotify" view="authn-redirect">
        <attribute name="csrf_excluded" value="true" type="boolean"/>
        <transition on="proceed" to="RedirectToService" />
    </view-state>


Is there someway to modify what's displayed by the "externalRedirect"
pseudo view? I didn't think there was.

So if I can't modify what's displayed by the externalRedirect and I can't
override the system flow with a file in the local filesystem, it sounds
like my only option is to replace the system flow in the jar file 8-/?

I'm not sure why the ability to display an "ok, we're done, now you're
waiting for the remote service" view as the last thing isn't considered a
valid feature for general inclusion. For POST scenarios, you can modify
the view, but there's no way to make it work with a redirect AFAICT.

Thanks...

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768