Hi Ayesha,

We have to set the callback URL as property in Rest API. We already do this
for the dashboard. I think we do not want to fix this since we can remove
callback URL from the template if it is not required.

Thanks
Isura.


*Isura Dilhara Karunaratne*
Senior Software Engineer | WSO2
Email: [email protected]
Mob : +94 772 254 810
Blog : http://isurad.blogspot.com/




On Fri, Nov 25, 2016 at 5:18 PM, Ayesha Dissanayaka <[email protected]> wrote:

> Hi,
>
> As explained in IDENTITY-5264,
> <https://wso2.org/jira/browse/IDENTITY-5264>
>
> Enable email notifications for Self-signup in Identity Governance,
> use REST API: https://localhost:9443/api/identity/user/v0.9/me to self
> signup to IS.
>
> Click on the confirmation link sent to provided email of self signed user
> and follow the dialog.
>
> It get redirected to https://localhost:9443/accountrecoveryendpoint/%7B%
> 7Bcallback%7D%7D which is a broken page.
>
> But when self signup to IS using dashboard APP UI, there is no issue with
> the email link.
>
> I did some debugging around this and identified following.
>
> Link sent in email are as below
>
> 01. via Dashboard UI :
>       https://localhost:9443/accountrecoveryendpoint/confirmregist
> ration.do?confirmation=dc2ef6fe-6a53-49e3-a3ad-
> 776b78f699d4&userstoredomain=PRIMARY&username=Ayesha7&
> tenantdomain=carbon.super&callback=https%3A%2F%
> 2Flocalhost%3A9443%2Fauthenticationendpoint%2Flogin.do%
> 3FSSOAuthSessionID%3D297252FB3257F6532042516C7CA700723D41CDE
> B868D1E4CE7EF24F2063F35FFC2E39ADA855B7A76B188444B8E7E1682432
> D671A75FB54723CACBF508F4342E824449B02D31AED838B72CF01F342524
> E150B3E83E152557002EDEEB46A22713D1FA6D983FBD953FCB32AD9B50AD
> 1EDB9618155F6B70825ED2B132C379B494F0B%26commonAuthCallerPath
> %3D%2Fsamlsso%26forceAuth%3Dfalse%26passiveAuth%3Dfalse%
> 26tenantDomain%3Dcarbon.super%26sessionDataKey%3D37754e53-b5
> e2-4c59-8afb-9f3ddd2a3c67%26relyingParty%3Dwso2.my.dashboard
> %26type%3Dsamlsso%26sp%3Dwso2_sp_dashboard%26isSaaSApp%
> 3Dtrue%26authenticators%3DBasicAuthenticator%3ALOCAL
>
> 02. via REST API:
> https://localhost:9443/accountrecoveryendpoint/confirmregist
> ration.do?confirmation=cbb8ed93-2f30-497d-8eaa-
> 651969a35b9f&userstoredomain=PRIMARY&username=Ayesha8&
> tenantdomain=carbon.super&callback={{callback}}
>
> In 02. {{callback}} URL is not set, as selfUserRegistrationRequestDTO
> properties are not set at [1] via API.
>
> Similar behavior is observed if dashboard app UI is used with URL
> https://localhost:9443/accountrecoveryendpoint/register.do, where no
> callback parameter is set.
>
> email link :   https://localhost:9443/account
> recoveryendpoint/confirmregistration.do?confirmation=
> e585cfb6-0bdc-4bbe-ab9f-ed3762ada1f6&userstoredomain=
> PRIMARY&username=Ayesha9&tenantdomain=carbon.super&callback=null
>
> What is the best way to handle this. Should we generate a callback URL if
> the request doesn't have it?
>
> [1] https://github.com/wso2-extensions/identity-governance/blob/master/
> components/org.wso2.carbon.identity.user.endpoint/src/
> main/java/org/wso2/carbon/identity/user/endpoint/impl/
> MeApiServiceImpl.java#L48
>
> Thanks!
> -Ayesha
>
> --
> *Ayesha Dissanayaka*
> Software Engineer,
> WSO2, Inc : http://wso2.com
> <http://www.google.com/url?q=http%3A%2F%2Fwso2.com&sa=D&sntz=1&usg=AFQjCNEZvyc0uMD1HhBaEGCBxs6e9fBObg>
> 20, Palmgrove Avenue, Colombo 3
> E-Mail: [email protected] <[email protected]>
>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to