Form sessions, authentication

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Form sessions, authentication

Arlo White
We're looking at using Orbeon to render forms for our workflow engine.
We need to track the form a user is working on. Our initial idea is to
generate a SESSIONID unique to the user's form and pass it to Orbeon as
a request parameter. We want to forward this SESSIONID to every service
and the final submit.

With services it seems like we can do something like this
http://wiki.orbeon.com/forms/how-to/load-initial-form-data#TOC-The-pull-solution

<xforms:submission id="load-data-submission"
                      method="get" serialization="none"
                      resource="http://myserver.edu/service?sessionid={xxforms:get-request-parameter('sessionid')}"
                      replace="instance" instance="user-data"/>


The problem is with the send button send.uri property, there's no way to
attach the sessionid as it's just a string:
<property as="xs:anyURI" name="oxf.fr.detail.send.uri.*.*"
value="http://myserver.edu/submit"/>

In the mailing list there was some mention of Orbeon passing the
JSESSIONID, but I'm not sure if that's is the best route...it seems messy.

Is there any way to pass request parameters to all services and the
submit url similar to request parameter passing in this section?:
http://wiki.orbeon.com/forms/doc/developer-guide/configuration-properties/configuration-properties-form-runner#TOC-Initial-instance-from-service

Maybe we're making this harder than it needs to be, is there a better
way to track a form instance?

--
Arlo White
Application Management / ITS
CalPoly, San Luis Obispo
[hidden email]



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Form sessions, authentication

Erik Bruchez
Administrator
Arlo,

We are thinking about building something like this in Form Runner:

http://wiki.orbeon.com/forms/projects/form-runner-builder/form-runner-data-envelope

That would cover the entry point and and exit point, not necessarily
services called inbetween, although you could explicitly pass the
workflow id "by hand" to those services.

In the current state of things, you would have to modify Form Runner
to pass the request parameter to the send function.

Also, calling xxforms:get-request-parameter() currently is only
possible upon page load.

-Erik

On Wed, Nov 3, 2010 at 5:39 PM, Arlo White <[hidden email]> wrote:

> We're looking at using Orbeon to render forms for our workflow engine. We
> need to track the form a user is working on. Our initial idea is to generate
> a SESSIONID unique to the user's form and pass it to Orbeon as a request
> parameter. We want to forward this SESSIONID to every service and the final
> submit.
>
> With services it seems like we can do something like this
> http://wiki.orbeon.com/forms/how-to/load-initial-form-data#TOC-The-pull-solution
>
> <xforms:submission id="load-data-submission"
>                     method="get" serialization="none"
>
> resource="http://myserver.edu/service?sessionid={xxforms:get-request-parameter('sessionid')}"
>                     replace="instance" instance="user-data"/>
>
>
> The problem is with the send button send.uri property, there's no way to
> attach the sessionid as it's just a string:
> <property as="xs:anyURI" name="oxf.fr.detail.send.uri.*.*"
> value="http://myserver.edu/submit"/>
>
> In the mailing list there was some mention of Orbeon passing the JSESSIONID,
> but I'm not sure if that's is the best route...it seems messy.
>
> Is there any way to pass request parameters to all services and the submit
> url similar to request parameter passing in this section?:
> http://wiki.orbeon.com/forms/doc/developer-guide/configuration-properties/configuration-properties-form-runner#TOC-Initial-instance-from-service
>
> Maybe we're making this harder than it needs to be, is there a better way to
> track a form instance?
>
> --
> Arlo White
> Application Management / ITS
> CalPoly, San Luis Obispo
> [hidden email]
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Form sessions, authentication

ktangirala
Is there an implementation of the Form Runner Data envelope that we can use? I also have a similar requirement that I need to send request parameters off the Send URI. Originally I wanted to use the submit go URI but that is failing in Orbeon 3.8. This issue is fixed post-3.8 but apparently there are others issues with the nightly build (which I emailed Erik so that the team can look at it).

Any help is greatly appreciated in this topic.

Thanks,
K
Reply | Threaded
Open this post in threaded view
|

Re: Re: Form sessions, authentication

Erik Bruchez
Administrator
K,

Unfortunately the envelope feature is not implemented yet.

-Erik

On Wed, Dec 22, 2010 at 9:18 PM, ktangirala
<[hidden email]> wrote:

>
> Is there an implementation of the Form Runner Data envelope that we can use?
> I also have a similar requirement that I need to send request parameters off
> the Send URI. Originally I wanted to use the submit go URI but that is
> failing in Orbeon 3.8. This issue is fixed post-3.8 but apparently there are
> others issues with the nightly build (which I emailed Erik so that the team
> can look at it).
>
> Any help is greatly appreciated in this topic.
>
> Thanks,
> K
>
> --
> View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/Form-sessions-authentication-tp3026413p3161653.html
> Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws