Uploaded image for project: 'Single Sign On'
  1. Single Sign On
  2. MGNLSSO-54

Handle the case where the state is obsolete

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Neutral
    • 1.1.1
    • None
    • None
    • None

    Description

      In some scenarios:

      • either the user loaded the login page but left it idle for some time, before trying to finally login,
      • or the user has browser data for two competing instances (i.e. local & cloud)

      The state parameter can become obsolete. In such a case, the user is shown with the stack trace. It would be nicer to instead show a page that prompts the user to try again.

      The problem I see, however, is that Magnolia is not responsible for displaying the IDP's login form. It's impossible to simply show that page with an error label, as is commonly done. So what should we show instead?

      Checklists

        Acceptance criteria

        Attachments

          Activity

            People

              mmichel Maxime Michel
              mmichel Maxime Michel
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Checklists

                  Task DoD