Tip: Understanding alwaysRedirectOnPause

[klr8]

This thread discusses the "Understanding alwaysRedirectOnPause" tip published on the Ervacon Spring Web Flow Portal.

Read the tip at

http://www.ervacon.com/products/swf/tips/tip4.html

[Keith Donald]

This is a definite must read tip for all SWF users!

Keith

[ojs]

Thank's for this great article! One thing I'm missing a bit is how to handle security in a redirectOnPause world. I'm using REST-style URLs (by using the RequestPathFlowExecutorArgumentHandler as the argumentHandler for the FlowController) to be able to secure them in my acegi access configuration. When enabling redirectOnPause, SWF redirects to an URL which isn't specific to a certain flow anymore. Is there a way to handle that (without a special security interceptor)?

[klr8]

Interesting question. One thing you can do is serve your flows requiring different security using a different flow controller (and a different path). You can have multiple flow controllers 'fronting' a single flow definition registry.

Erwin

[ojs]

Originally Posted by klr8

Interesting question. One thing you can do is serve your flows requiring different security using a different flow controller (and a different path). You can have multiple flow controllers 'fronting' a single flow definition registry.

I'd like to have only one flow controller. What is the format of the URL, SWF redirects to? Currently my http://domain/flow/myFlowId is redirected to http://domain/flow/k/[UUIDs].

Is /k/ always prefix'ed, or what is /k/? Is the prefix configurable? Nobody would be able to guess guess the UUIDs, so I could probably give access to everyone below /k/ ?


Best

Oliver

[klr8]

The /k/ is just a delimiter used to mark the start of the flow execution key. Check the source code of the RequestPathFlowExecutorArgumentHandler for details. The 'k' is configurable using the keyDelimiter property.

Erwin

[ojs]

Originally Posted by klr8

The /k/ is just a delimiter used to mark the start of the flow execution key.

So, it should be perfectly safe to grant access to everything starting with /k/ - right? Somebody would have to guess two UUIDs, which should be hard enough :-)


Best

Oliver

[calebphillips]

Just wanted to say thanks, because I was wanting to make the transition to using alwaysRedirectOnPause and this document was exactly what I needed. I would agree that this is required reading.

[Sudheesh]

Hi ,

Am using SWF 2.0.1

I have following configuration

<webflow:flow-executor id="flowExecutor">
<webflow:flow-execution-attributes>
<webflow:always-redirect-on-pause value="false"/>
</webflow:flow-execution-attributes>
</webflow:flow-executor>


Now its not working


But if I use <webflow:always-redirect-on-pause value="true"/>

My transitions are working



What could be the reason?

Any help is greatly appreciated.


Thanks In Advance,
Sudheesh

[Bopo]

Great post, that information really helped me out .


___________________________
My website - dedicated to information about African Grey Parrots and also other species of parrots.