Hi Waruna,

On Wed, Aug 13, 2014 at 2:56 PM, Waruna Perera <[email protected]> wrote:

> Hi,
>
> Did you encounter with session time out error with chrome browser session
> cookies?
>
No. As I mentioned root cause for this issue is cross-domain requests are
not allowed within iframes by Google chrome.

On Wed, Aug 13, 2014 at 1:46 PM, Udara Rathnayake <[email protected]> wrote:

> Hi,
>
> Seems this issue[1] happens due to URL redirections during SSO login.
> Initially we use URL[2] to browse store homepage. When we click log-in,
> store redirects to a similar URL like this[3]. If we provide correct login
> credentials it redirects back to the store[2]. Up to now everything works
> as expected.
>
> We have embedded social framework via an iframe, when user browse an asset
> within the store and press UserReviews Ideally comment/rating box should
> appear within the iframe. This( comment/rating box) resides within
> Social-Jaggery app which SSOed with store and publisher apps.
>
> Since there is a redirect happens underneath(from localhost to localIP)
> while SSO login, google chrome doesn't allow this. But on FF this works
> perfectly.
>
> Then I have modified AssertionConsumerService property within
> sso-idp-config.xml from,
> https://localhost:9443/<APP_NAME>/acs to 
> https://<LOCAL_IP>:9443/<APP_NAME>/acs
> .
> After this modification everything works as expected.
>
> Is there any way to change the hostname in sso-idp-config.xml from
> localhost to something like ${carbon.local.ip} as in carbon.xml so it will
> be populated and assigned dynamically.?
>
> ATM I'm looking into a possible solution where I can set a header
> parameter to solve this issue in google chrome.
>
> [1] https://wso2.org/jira/browse/STORE-490
> [2] http://localhost:9763/store
> [3]
> https://10.100.0.128:9443/sso/login?null&relyingParty=store&sessionDataKey=0dd324f3-aa70-42cd-a6c5-dd99e0b81062&type=samlsso&commonAuthCallerPath=samlsso&forceAuth=false&passiveAuth=false&authenticators=BasicAuthenticator:LOCAL
>
> Regards,
> UdaraR
>
> --
> *Udara Rathnayake*
> Software Engineer
> WSO2 Inc. : http://wso2.com
>
> Mobile : +94 772207239
> Twitter : http://twitter.com/udarakr
> Blog    : http://udarakr.blogspot.com
>
>
> _______________________________________________
> Dev mailing list
> [email protected]
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>


-- 
Waruna Perera
Senior Software Engineer - Test Automation
Mobile: +94 77 3867037
WSO2, Inc.; http://wso2.com/
lean . enterprise . middlewear.

>
>


-- 
*Udara Rathnayake*
Software Engineer
WSO2 Inc. : http://wso2.com

Mobile : +94 772207239
Twitter : http://twitter.com/udarakr
Blog    : http://udarakr.blogspot.com
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to