[mapguide-trac] #1021: Avoiding login window in an application using flexible fusion weblayout

[MapGuide Open Source]

#1021: Avoiding login window in an application using flexible fusion weblayout
--------------------------------+-------------------------------------------
   Reporter:  msuing            |       Owner:       
       Type:  defect            |      Status:  new  
   Priority:  high              |   Milestone:  2.2  
  Component:  Fusion Templates  |     Version:  2.0.2
   Severity:  blocker           |    Keywords:       
External_id:                    |  
--------------------------------+-------------------------------------------
 When we first access a flexible weblayout, a login window always appears
 on top of the application, which is a showstopper for an Internet
 application.
 A workaround propsed by DM solutions is to integrate the viewer in a frame
 or an iframe to initialize the session before the weblayout is called (the
 session id is passed in the URL with the parameter &SESSION=…).

 This workaround (php attached) works well for Internet Explorer and Google
 Chrome, but for Firefox, this login window cannot be over-passed.

 After a quick investigation, I have found in ../fusion/lib/fusionSF.js,
 after line 10499, the following code :
             this.body =  this.method == 'post' ?
                 (this.options.postBody || params) : null;
             this.transport.send(this.body);

             '''// Force Firefox to handle ready state 4 for synchronous
 requests'''
             if (!this.options.asynchronous &&
                 this.transport.overrideMimeType) {
                 this.onStateChange();
             }
 It doesn’t seems to work since the first unsuccessful request returns in
 Firebug :
 Host
 w2k8sfra32
 User-Agent
 Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.0.11) Gecko/2009060215
 Firefox/3.0.11 (.NET CLR 3
 .5.30729)
 …
 Referer
 ../fusion/templates/mapguide/CG67siteweb/index.html?session=4e34465c-3d53-
 102c-8000-000c29d489a8_en_7F0000010AF20AF10AF0
 &APPLICATIONDEFINITION=Library://CG67_SIGWEB/Weblayouts/wl_CG67_cantons_elus.ApplicationDefinition

 And the second successful one, after authentication :
 Host
 w2k8sfra32
 User-Agent
 Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.0.11) Gecko/2009060215
 Firefox/3.0.11 (.NET CLR 3
 .5.30729)
 …
 Referer
 ../fusion/templates/mapguide/CG67siteweb/index.html?session=4e34465c-3d53-
 102c-8000-000c29d489a8_en_7F0000010AF20AF10AF0
 &APPLICATIONDEFINITION=Library://CG67_SIGWEB/Weblayouts/wl_CG67_cantons_elus.ApplicationDefinition
 Authorization
 Basic QWRtaW5pc3RyYXRvcjphZG1pbg==

 Which means that the authorization hasn’t been generated despite the
 session creation, in the preliminary step.

 Max

-- 
Ticket URL: <http://trac.osgeo.org/mapguide/ticket/1021>
MapGuide Open Source <http://mapguide.osgeo.org/>
MapGuide Open Source Internals