Posted by Arlo White on Nov 04, 2010; 12:39am URL: https://discuss.orbeon.com/Form-sessions-authentication-tp3026413.html
We're looking at using Orbeon to render forms for our workflow engine.
We need to track the form a user is working on. Our initial idea is to
generate a SESSIONID unique to the user's form and pass it to Orbeon as
a request parameter. We want to forward this SESSIONID to every service
and the final submit.
The problem is with the send button send.uri property, there's no way to
attach the sessionid as it's just a string:
<property as="xs:anyURI" name="oxf.fr.detail.send.uri.*.*"
value="http://myserver.edu/submit"/>
In the mailing list there was some mention of Orbeon passing the
JSESSIONID, but I'm not sure if that's is the best route...it seems messy.