access to different component requires login process

[Wai]

Hello All,

Having logged in to use one ofbiz component, I have to perform another login process whenever I make use of another component.  I vaguely remember a posting that mentioned that this is the way ofbiz works.  Does anyone have any tips to allow a user to login once and allow the user to access other components (given that the user has permission to do so) without having to go through the login process again?

Thanks.

[Bilgin Ibryam-2]

I see this question coming up regularly from time to time.
Some times ago I explained why this behavior happens but cannot find
my post right now.
Also it should be fixed with OFBIZ-3862 long time ago, but there might
be other corner cases that cause it.

Basically what happened in the past was that every action that
rendered a screen in the background (like an ajax call) invalidated
externalLoginKey which is used to transfer the session between
applications. And if you try to login to another application while the
externalLoginKey is not valid, you get the login screen.

If you can provide exact steps how to get, I'll take a look.

Cheers,
Bilgin

On Wed, Oct 26, 2011 at 4:32 PM, Wai <[hidden email]> wrote:

> Hello All,
>
> Having logged in to use one ofbiz component, I have to perform another login
> process whenever I make use of another component.  I vaguely remember a
> posting that mentioned that this is the way ofbiz works.  Does anyone have
> any tips to allow a user to login once and allow the user to access other
> components (given that the user has permission to do so) without having to
> go through the login process again?
>
> Thanks.
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/access-to-different-component-requires-login-process-tp3941033p3941033.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[BJ Freeman]

http://mail-archives.apache.org/mod_mbox/ofbiz-user/201007.mbox/%3CAANLkTilYhTXJY82F5weHZ7RQQVoHAz5himn7aveYihLP@...%3E

Bilgin Ibryam sent the following on 10/26/2011 9:29 AM:

> I see this question coming up regularly from time to time.
> Some times ago I explained why this behavior happens but cannot find
> my post right now.
> Also it should be fixed with OFBIZ-3862 long time ago, but there might
> be other corner cases that cause it.
>
> Basically what happened in the past was that every action that
> rendered a screen in the background (like an ajax call) invalidated
> externalLoginKey which is used to transfer the session between
> applications. And if you try to login to another application while the
> externalLoginKey is not valid, you get the login screen.
>
> If you can provide exact steps how to get, I'll take a look.
>
> Cheers,
> Bilgin
>
> On Wed, Oct 26, 2011 at 4:32 PM, Wai <[hidden email]> wrote:
>> Hello All,
>>
>> Having logged in to use one ofbiz component, I have to perform another login
>> process whenever I make use of another component.  I vaguely remember a
>> posting that mentioned that this is the way ofbiz works.  Does anyone have
>> any tips to allow a user to login once and allow the user to access other
>> components (given that the user has permission to do so) without having to
>> go through the login process again?
>>
>> Thanks.
>>
>> --
>> View this message in context: http://ofbiz.135035.n4.nabble.com/access-to-different-component-requires-login-process-tp3941033p3941033.html
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>

[BJ Freeman]

you will see a externalLoginKey=EL32757843547
this is time sensitive but is the mechanism for going between application.
if your on a intranet not internet you lengthen the timeout.
also look up
<xs:attribute name="target-type" default="intra-app">
read the widge-*.xsd for documentation.

BJ Freeman sent the following on 10/26/2011 1:21 PM:

> http://mail-archives.apache.org/mod_mbox/ofbiz-user/201007.mbox/%3CAANLkTilYhTXJY82F5weHZ7RQQVoHAz5himn7aveYihLP@...%3E
>
> Bilgin Ibryam sent the following on 10/26/2011 9:29 AM:
>> I see this question coming up regularly from time to time.
>> Some times ago I explained why this behavior happens but cannot find
>> my post right now.
>> Also it should be fixed with OFBIZ-3862 long time ago, but there might
>> be other corner cases that cause it.
>>
>> Basically what happened in the past was that every action that
>> rendered a screen in the background (like an ajax call) invalidated
>> externalLoginKey which is used to transfer the session between
>> applications. And if you try to login to another application while the
>> externalLoginKey is not valid, you get the login screen.
>>
>> If you can provide exact steps how to get, I'll take a look.
>>
>> Cheers,
>> Bilgin
>>
>> On Wed, Oct 26, 2011 at 4:32 PM, Wai <[hidden email]> wrote:
>>> Hello All,
>>>
>>> Having logged in to use one ofbiz component, I have to perform another login
>>> process whenever I make use of another component.  I vaguely remember a
>>> posting that mentioned that this is the way ofbiz works.  Does anyone have
>>> any tips to allow a user to login once and allow the user to access other
>>> components (given that the user has permission to do so) without having to
>>> go through the login process again?
>>>
>>> Thanks.
>>>
>>> --
>>> View this message in context: http://ofbiz.135035.n4.nabble.com/access-to-different-component-requires-login-process-tp3941033p3941033.html
>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>
>>
>

[Bilgin Ibryam-2]

Actually this was the asnwer I was looking for, which is the same as a
wrote earylier today:

http://ofbiz.markmail.org/message/l4bz76qi7gsyrpdk?q=externalLoginKey+from:%22Bilgin+Ibryam%22



On Wed, Oct 26, 2011 at 9:21 PM, BJ Freeman <[hidden email]> wrote:

> http://mail-archives.apache.org/mod_mbox/ofbiz-user/201007.mbox/%3CAANLkTilYhTXJY82F5weHZ7RQQVoHAz5himn7aveYihLP@...%3E
>
> Bilgin Ibryam sent the following on 10/26/2011 9:29 AM:
>> I see this question coming up regularly from time to time.
>> Some times ago I explained why this behavior happens but cannot find
>> my post right now.
>> Also it should be fixed with OFBIZ-3862 long time ago, but there might
>> be other corner cases that cause it.
>>
>> Basically what happened in the past was that every action that
>> rendered a screen in the background (like an ajax call) invalidated
>> externalLoginKey which is used to transfer the session between
>> applications. And if you try to login to another application while the
>> externalLoginKey is not valid, you get the login screen.
>>
>> If you can provide exact steps how to get, I'll take a look.
>>
>> Cheers,
>> Bilgin
>>
>> On Wed, Oct 26, 2011 at 4:32 PM, Wai <[hidden email]> wrote:
>>> Hello All,
>>>
>>> Having logged in to use one ofbiz component, I have to perform another login
>>> process whenever I make use of another component.  I vaguely remember a
>>> posting that mentioned that this is the way ofbiz works.  Does anyone have
>>> any tips to allow a user to login once and allow the user to access other
>>> components (given that the user has permission to do so) without having to
>>> go through the login process again?
>>>
>>> Thanks.
>>>
>>> --
>>> View this message in context: http://ofbiz.135035.n4.nabble.com/access-to-different-component-requires-login-process-tp3941033p3941033.html
>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>
>>
>

[Wai]

I think this problem might be something I did with my working copy of rev1182636.  I cannot reproduce it in rev1182636.

Unfortunately, I cannot get the latest from the trunk to see if it works well as it crashes (some problem with component://common/widget/CommonScreens.xml#GlobalDecorator).

I'll have to find out what's wrong on my side.

Thanks