browser private window activation condition

[Cantor, Scott]

> Is such interaction between server-side code and browser
>-side javascript possible? Or is there some other way to do
> what I want to do?

I'm sure there's some insanely complex sort of approach involving Javascript submitting data to some custom endpoint that stores off state and an activation condition using that to read back the state, but definitely nothing I would advise doing.

I did build a basically undocumented REST API for the storage service in the IdP. I think I went pretty far with it even allowing specific storage contexts to be controlled with custom access control rules. Having said which, I probably wouldn't advise exposing it that way to the open internet, but in theory it is coded to allow for that.

Short of that, I can't see any obvious way it could be done unless relying on the browser sending a custom header is an option (i.e. having the users themselves actually adjust things on their end with a browser add-on).

-- Scott