cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Reauthentication in CAP Service

yasmeenhs
Explorer

on ‎02-21-2024 9:50 AM

0 Kudos

I created a CAP Service on Cloud Foundry with an approuter routing to an app created by SAP Build Apps. The routes and backend are protected by xsuaa

 

{
  "welcomeFile": "/resources/index.html",
  "routes": [
    ....
    {
      "source": "^/buildappsxxxx(.*)$",
      "target": "/buildappsxxxx/$1",
      "service": "html5-apps-repo-rt",
      "cacheControl": "no-cache, must-revalidate",
      "authenticationType": "xsuaa",
      "csrfProtection": true
    },
    {
      "source": "^/(.*)$",
      "target": "$1",
      "destination": "srv-api",
      "authenticationType": "xsuaa",
      "csrfProtection": true
    }
  ],
  "logout": {
    "logoutEndpoint": "/logout",
    "logoutPage": "/logout.html"
  }
}

 

 The service works fine; however, when the app is left idle and the auth token is expired, the user is not redirected to the login page, but the page appears completely empty. Upon inspection, I see that the request returns a status 200 

 

 

Pasted Graphic Large.jpeg

and in the Response a script that should redirect to the login, but it is never invoked.

<html>
    <head>
        <link rel="shortcut icon" href="data&colon;image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7"/>
        <script>
            document.cookie = "fragmentAfterLogin=" + encodeURIComponent(location.hash) + ";path=/";
            document.cookie = "locationAfterLogin=" + encodeURIComponent(location.href.split('#')[0].split(location.host)[1]) + ";path=/";
            document.cookie = "signature=80wKzBh2tsdpceVBKzWDag7PAKk%3D;path=/";
            location = "https://xxx.authentication.xx.hana.ondemand.com/oauth/authorize?response_type=code&client_id=xx&redirect_uri=https%3A%2F%2Fxxx.hana.ondemand.com%2Flogin%2Fcallback"
        </script>
    </head>
</html>

My question here naturally is how can I avoid this issue and redirect the user to login when the session expires?

Labels:
Show replies
Show replies
Answer

Accepted Solutions (0)

Answers (0)

Ask a Question