Can't use widget to log in to private site
The private site functionality is great but I'm having a problem when using the widget. I was hoping to have testers log in to our beta web site and then provide their feedback through Tender using the widget. Clicking the Help and Support widget tab on our site opens the private site log in within the little widget pop-up window. This is fine. However, successfully entering a Tender login then results in all future Tender pages rendering within the little widget display window.
I believe this was mentioned in the thread: "Can't use
cross-site login with widget":
"It's important for us, since our Tender install is private at the
moment, so without the SSO keypass, we get the login screen in the
widget & the redirect & login doesn't scale properly."
I think the preferred behavior would be to show the standard widget issue entry screen once the user has successfully logged in (?).
Discussions are closed to public comments.
If you need help with Tender please
start a new discussion.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
1 Posted by rick on 04 Sep, 2009 06:49 PM
Sorry for not responding, I thought someone else replied with a quick blurb. We're looking into this.
2 Posted by System on 04 Sep, 2009 06:50 PM
This discussion was assigned to Rick, on ticket 483.
3 Posted by jono on 04 Sep, 2009 10:01 PM
Hey, that's great. Thanks. Would this be something that could be fixed quickly or is it likely going to take a while?
4 Posted by rick on 04 Sep, 2009 10:05 PM
Hopefully fairly quickly. I just found and fixed one issue due to the
way the JS widget was escaping the multipass token. It's still
rejecting the token somewhere, so I'm trying to track this nasty bug
down.
5 Posted by rick on 05 Sep, 2009 12:16 AM
Okay, I think I finally got this fixed. It looks like it was some weirdness with how the browser was handling the Tender session cookie from the other app page's iframe.
All my tests showed that yes, requests to
http://URL?sso=TOKENdid in fact log the user in properly. But it doesn't matter if the browser does something totally different. It appears that the cookie sessions aren't persisted from request to request from the widget iframe. I'm not sure, but I'm now passing the SSO token around from page to page.You'll want to make sure that the timeout you set when generating the SSO token is long enough. If you set it to just 5 minutes, the SSO won't log in if a user sits idle at a page for 10 minutes before attempting to send feedback through the widget.
Let me know if you have any other problems.
6 Posted by jono on 05 Sep, 2009 05:15 PM
Thanks for your quick response. I'm a little confused, though. :)
We aren't using SSO. I just want to be able to log in to a private site manually through the widget and have it work.
What I did: Clicked the Help and Support Tender tab on our site and then logged in to our private site.
What happened: The widget window showed the private site log in (without the 'X' in the upper left to close it). But after I successfully logged in the browser continued to render the Tender pages within the little widget window.
What I expected to happen: The widget window would show the private site log in and a Close button. When I successfully enter my log in information I would be directed to the standard widget issue entry screen within the widget (not the Tender site which can't scale within the widget window).
I've attached a screen shot of the Tender widget after I successfully logged in.
7 Posted by rick on 08 Sep, 2009 10:59 PM
Hi, the widget isn't really designed for private sites. It'd work seamlessly if you were passing in an SSO multipass token to log users in automatically. I had a fix in place, but QA testing revealed a nasty bug. Stupid Accept headers :)
Also, sorry for the confusion. We had a problem with the widgets not storing multipass and I thought this was lumped in with that issue.
8 Posted by Gaz on 25 Sep, 2009 02:20 PM
I just wanted to point out another of the points raised in the initial posting, "Tender pages rendering within the little widget display window".
When you click on the "This widget is powered by Mike's Tender." link at the bottom of the initial widget display window content - the rather wide app is rendered in the little widget display window - it might be confusing for my users - if that popped up in a new browser window I would be a happy man :)
9 Posted by rick on 28 Sep, 2009 04:07 AM
You know, I added a target attribute, but it just opens in the full browser window. It's not a new browser window, so it's better than being rendered inside the widget frame.
I also double checked the private site stuff. Logging in works fine. I'm resolving this issue now. Let me know if you have any more feedback.
rick closed this discussion on 28 Sep, 2009 04:07 AM.