Skip to main content
J
jhernández1-Visitor
1-Visitor
December 2, 2016
Question

Redirect_URL should admit an url?

  • December 2, 2016
  • 3 replies
  • 3697 views

Hi all,

We're trying to redirect the user to an URL (<REDIRECT_URL>) when performing a logout:


http://localhost:8080/Thingworx/Server/*/Services/Logout?method=post&_redirectURL=<REDIRECT_URL>

We've spotted that redirect is not performed whether <REDIRECT_URL> contains :, ? and/or ?. It's not possible, for example, to redirect to http://www.ptc.com

Log entry we get from Thingworx is:

016-12-01 21:50:12.806+0100 [L: ERROR] [O: E.c.t.s.f.ValidatingHttpRequest] [I: ] [U: Administrator] [S: ] [T: http-nio-8080-exec-4] Error occurred while validating HTTP parameter: _redirectURL

According to the documentation and other threads (like https://community.thingworx.com/message/6101#6101) it should be possible, but we were not able to achieve it.


Any ideas/suggestions?


Thanks,



Josemi


3 replies

A
ankigupta5-Regular Member
5-Regular Member
December 2, 2016

Hi José Miguel Hernández​, Try using the logout button available in the ThingWorx marketplace:

https://marketplace.thingworx.com/Items/logout-button

I hope it helps

C
CarlesColl1-Visitor
1-Visitor
December 2, 2016

Hi Ankit,

If he it's on 7.X Logout Widget it's already as an standard option no need for extension.

Carles.

A
ankigupta5-Regular Member
5-Regular Member
December 2, 2016

Hi Carles,

That's correct. But the core logout button allows only Mashup as redirect url and the Marketplace extension allows any url.

Mashup redirect does not make sense to me after logout as it would not be accessible after logout so I suggested the Marketplace logout extension instead.

Thanks,

Ankit Gupta

    J
    jhernández1-VisitorAuthor
    1-Visitor
    December 2, 2016

    Thanks for your feedback. Logout widget is not valid so this is not included in a mashup.

    We're developing a service for achieving Single Sing On (SSO) between another platform and our Thx instance. So, when logout in Thx is performed, we need also to redirect to the logout service in the other platform.

    J
    jhernández1-VisitorAuthor
    1-Visitor
    December 2, 2016

    To be more precise, the use case is the following:

    It's an implementation of a SSO between Thingworx and other platform (let's call PlatA).

    - The user triggers logout on PlatA

    - PlatA invokes a service on Thingworx. This service should do:

         * logout on Thingworx platform

         * Go back to PlatA with result code

    - Logout on PlatA

    For me, it's a bug that redirectURL parameter doesn't admit an URL... but I only can see workarounds for this (and in our case they're not aplicable so we're not under a mashup or JS domain).

    C
    CarlesColl1-Visitor
    1-Visitor
    December 2, 2016

    Hi José,

    If it's SSO / Authentication did you look onto Thingworx Authenticators feature, maybe well suited to do a SSO solution.

    Carles.

    Terms & ConditionsAccessibility statement