Hi,

As explained in IDENTITY-5264, <https://wso2.org/jira/browse/IDENTITY-5264>

Enable email notifications for Self-signup in Identity Governance,
use REST API: https://localhost:9443/api/identity/user/v0.9/me to self
signup to IS.

Click on the confirmation link sent to provided email of self signed user
and follow the dialog.

It get redirected to
https://localhost:9443/accountrecoveryendpoint/%7B%7Bcallback%7D%7D which
is a broken page.

But when self signup to IS using dashboard APP UI, there is no issue with
the email link.

I did some debugging around this and identified following.

Link sent in email are as below

01. via Dashboard UI :
      https://localhost:9443/accountrecoveryendpoint/confirmregistration.do?
confirmation=dc2ef6fe-6a53-49e3-a3ad-776b78f699d4&userstoredomain=PRIMARY&
username=Ayesha7&tenantdomain=carbon.super&callback=https%
3A%2F%2Flocalhost%3A9443%2Fauthenticationendpoint%
2Flogin.do%3FSSOAuthSessionID%3D297252FB3257F6532042516C7CA7
00723D41CDEB868D1E4CE7EF24F2063F35FFC2E39ADA855B7A76B188444B
8E7E1682432D671A75FB54723CACBF508F4342E824449B02D31AED838B72
CF01F342524E150B3E83E152557002EDEEB46A22713D1FA6D983FBD953FC
B32AD9B50AD1EDB9618155F6B70825ED2B132C379B494F0B%26commonAuthCallerPath%3D%
2Fsamlsso%26forceAuth%3Dfalse%26passiveAuth%3Dfalse%
26tenantDomain%3Dcarbon.super%26sessionDataKey%3D37754e53-
b5e2-4c59-8afb-9f3ddd2a3c67%26relyingParty%3Dwso2.my.
dashboard%26type%3Dsamlsso%26sp%3Dwso2_sp_dashboard%26isSaaSApp%3Dtrue%
26authenticators%3DBasicAuthenticator%3ALOCAL

02. via REST API:
https://localhost:9443/accountrecoveryendpoint/confirmregistration.do?
confirmation=cbb8ed93-2f30-497d-8eaa-651969a35b9f&userstoredomain=PRIMARY&
username=Ayesha8&tenantdomain=carbon.super&callback={{callback}}

In 02. {{callback}} URL is not set, as selfUserRegistrationRequestDTO
properties are not set at [1] via API.

Similar behavior is observed if dashboard app UI is used with URL
https://localhost:9443/accountrecoveryendpoint/register.do, where no
callback parameter is set.

email link :   https://localhost:9443/accountrecoveryendpoint/
confirmregistration.do?confirmation=e585cfb6-0bdc-4bbe-ab9f-ed3762ada1f6&
userstoredomain=PRIMARY&username=Ayesha9&tenantdomain=
carbon.super&callback=null

What is the best way to handle this. Should we generate a callback URL if
the request doesn't have it?

[1]
https://github.com/wso2-extensions/identity-governance/blob/master/components/org.wso2.carbon.identity.user.endpoint/src/main/java/org/wso2/carbon/identity/user/endpoint/impl/MeApiServiceImpl.java#L48

Thanks!
-Ayesha

-- 
*Ayesha Dissanayaka*
Software Engineer,
WSO2, Inc : http://wso2.com
<http://www.google.com/url?q=http%3A%2F%2Fwso2.com&sa=D&sntz=1&usg=AFQjCNEZvyc0uMD1HhBaEGCBxs6e9fBObg>
20, Palmgrove Avenue, Colombo 3
E-Mail: [email protected] <[email protected]>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to