Login  Register

Form sessions, authentication

Posted by Arlo White on Nov 04, 2010; 12:39am
URL: https://discuss.orbeon.com/Form-sessions-authentication-tp3026413.html

We're looking at using Orbeon to render forms for our workflow engine.
We need to track the form a user is working on. Our initial idea is to
generate a SESSIONID unique to the user's form and pass it to Orbeon as
a request parameter. We want to forward this SESSIONID to every service
and the final submit.

With services it seems like we can do something like this
http://wiki.orbeon.com/forms/how-to/load-initial-form-data#TOC-The-pull-solution

<xforms:submission id="load-data-submission"
                      method="get" serialization="none"
                      resource="http://myserver.edu/service?sessionid={xxforms:get-request-parameter('sessionid')}"
                      replace="instance" instance="user-data"/>


The problem is with the send button send.uri property, there's no way to
attach the sessionid as it's just a string:
<property as="xs:anyURI" name="oxf.fr.detail.send.uri.*.*"
value="http://myserver.edu/submit"/>

In the mailing list there was some mention of Orbeon passing the
JSESSIONID, but I'm not sure if that's is the best route...it seems messy.

Is there any way to pass request parameters to all services and the
submit url similar to request parameter passing in this section?:
http://wiki.orbeon.com/forms/doc/developer-guide/configuration-properties/configuration-properties-form-runner#TOC-Initial-instance-from-service

Maybe we're making this harder than it needs to be, is there a better
way to track a form instance?

--
Arlo White
Application Management / ITS
CalPoly, San Luis Obispo
[hidden email]



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws