cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

Redirect_URL should admit an url?

Highlighted
Newbie

Redirect_URL should admit an url?

Hi all,

We're trying to redirect the user to an URL (<REDIRECT_URL>) when performing a logout:


http://localhost:8080/Thingworx/Server/*/Services/Logout?method=post&_redirectURL=<REDIRECT_URL>

We've spotted that redirect is not performed whether <REDIRECT_URL> contains :, ? and/or ?. It's not possible, for example, to redirect to http://www.ptc.com

Log entry we get from Thingworx is:

016-12-01 21:50:12.806+0100 [L: ERROR] [O: E.c.t.s.f.ValidatingHttpRequest] [I: ] [U: Administrator] [S: ] [T: http-nio-8080-exec-4] Error occurred while validating HTTP parameter: _redirectURL

According to the documentation and other threads (like https://community.thingworx.com/message/6101#6101) it should be possible, but we were not able to achieve it.


Any ideas/suggestions?


Thanks,



Josemi


6 REPLIES 6
Highlighted

Re: Redirect_URL should admit an url?

Hi José Miguel Hernández​, Try using the logout button available in the ThingWorx marketplace:

https://marketplace.thingworx.com/Items/logout-button

I hope it helps

Highlighted

Re: Redirect_URL should admit an url?

Hi Ankit,

If he it's on 7.X Logout Widget it's already as an standard option no need for extension.

Carles.

Highlighted

Re: Redirect_URL should admit an url?

Hi Carles,

That's correct. But the core logout button allows only Mashup as redirect url and the Marketplace extension allows any url.

Mashup redirect does not make sense to me after logout as it would not be accessible after logout so I suggested the Marketplace logout extension instead.

Thanks,

Ankit Gupta

Highlighted

Re: Redirect_URL should admit an url?

Thanks for your feedback. Logout widget is not valid so this is not included in a mashup.

We're developing a service for achieving Single Sing On (SSO) between another platform and our Thx instance. So, when logout in Thx is performed, we need also to redirect to the logout service in the other platform.

Highlighted

Re: Redirect_URL should admit an url?

To be more precise, the use case is the following:

It's an implementation of a SSO between Thingworx and other platform (let's call PlatA).

- The user triggers logout on PlatA

- PlatA invokes a service on Thingworx. This service should do:

     * logout on Thingworx platform

     * Go back to PlatA with result code

- Logout on PlatA

For me, it's a bug that redirectURL parameter doesn't admit an URL... but I only can see workarounds for this (and in our case they're not aplicable so we're not under a mashup or JS domain).

Highlighted

Re: Redirect_URL should admit an url?

Hi José,

If it's SSO / Authentication did you look onto Thingworx Authenticators feature, maybe well suited to do a SSO solution.

Carles.

Announcements

Thingworx Navigate content has a new home! Click here to access the new Thingworx Navigate forum!