You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@manifoldcf.apache.org by "Karl Wright (JIRA)" <ji...@apache.org> on 2012/11/30 09:43:59 UTC

[jira] [Created] (CONNECTORS-574) Web connector session-based login needs more power to distinguish between multiple forms

Karl Wright created CONNECTORS-574:
--------------------------------------

             Summary: Web connector session-based login needs more power to distinguish between multiple forms
                 Key: CONNECTORS-574
                 URL: https://issues.apache.org/jira/browse/CONNECTORS-574
             Project: ManifoldCF
          Issue Type: Improvement
    Affects Versions: ManifoldCF 1.0.1, ManifoldCF 1.0
            Reporter: Karl Wright
            Assignee: Karl Wright
             Fix For: ManifoldCF 1.1


Setting up a session-based login sequence requires a user to be able to uniquely describe a desired set of pages that set up cookies.  Specifically, the pages must be one of the following types:

- Containing a form of a specific name
- Containing a link with a specific target
- Containing a redirection with a specific target

Modern login pages often contain many forms, however, and they can be generated by other software.  In that case the forms often are identified by use of an "id" attribute rather than a "name".

I've also seen situations where pages in login sequences are redirected through Javascript, and therefore it is difficult to write a rule that matches such pages, since there are no obvious links or forms either.  It would be great to find a solution to that - maybe a lowest-priority "match everything" button selection would help.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (CONNECTORS-574) Web connector session-based login needs more power to distinguish between multiple forms

Posted by "Karl Wright (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CONNECTORS-574?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13508342#comment-13508342 ] 

Karl Wright commented on CONNECTORS-574:
----------------------------------------

r1416244 and 
r1416199

                
> Web connector session-based login needs more power to distinguish between multiple forms
> ----------------------------------------------------------------------------------------
>
>                 Key: CONNECTORS-574
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-574
>             Project: ManifoldCF
>          Issue Type: Improvement
>    Affects Versions: ManifoldCF 1.0, ManifoldCF 1.0.1
>            Reporter: Karl Wright
>            Assignee: Karl Wright
>             Fix For: ManifoldCF 1.1
>
>
> Setting up a session-based login sequence requires a user to be able to uniquely describe a desired set of pages that set up cookies.  Specifically, the pages must be one of the following types:
> - Containing a form of a specific name
> - Containing a link with a specific target
> - Containing a redirection with a specific target
> Modern login pages often contain many forms, however, and they can be generated by other software.  In that case the forms often are identified by use of an "id" attribute rather than a "name".
> I've also seen situations where pages in login sequences are redirected through Javascript, and therefore it is difficult to write a rule that matches such pages, since there are no obvious links or forms either.  It would be great to find a solution to that - maybe a lowest-priority "match everything" button selection would help.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (CONNECTORS-574) Web connector session-based login needs more power to distinguish between multiple forms

Posted by "Karl Wright (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CONNECTORS-574?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Karl Wright resolved CONNECTORS-574.
------------------------------------

    Resolution: Fixed
    
> Web connector session-based login needs more power to distinguish between multiple forms
> ----------------------------------------------------------------------------------------
>
>                 Key: CONNECTORS-574
>                 URL: https://issues.apache.org/jira/browse/CONNECTORS-574
>             Project: ManifoldCF
>          Issue Type: Improvement
>    Affects Versions: ManifoldCF 1.0, ManifoldCF 1.0.1
>            Reporter: Karl Wright
>            Assignee: Karl Wright
>             Fix For: ManifoldCF 1.1
>
>
> Setting up a session-based login sequence requires a user to be able to uniquely describe a desired set of pages that set up cookies.  Specifically, the pages must be one of the following types:
> - Containing a form of a specific name
> - Containing a link with a specific target
> - Containing a redirection with a specific target
> Modern login pages often contain many forms, however, and they can be generated by other software.  In that case the forms often are identified by use of an "id" attribute rather than a "name".
> I've also seen situations where pages in login sequences are redirected through Javascript, and therefore it is difficult to write a rule that matches such pages, since there are no obvious links or forms either.  It would be great to find a solution to that - maybe a lowest-priority "match everything" button selection would help.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira