Question
Pegasystems Inc.
ES
Last activity: 6 Jul 2016 5:18 EDT
Session not kept when "Open URL in new window" through Apache server
Hi,
We have an embedded browser IE 11 (Compatibilty mode 9) which is using a "Open URL in new window" to render a PDF (store as a Rule-Binary-File internally in PRPC) in a pop-up window. It works fine if we use the direct url (http://ssl0202xxx....), but the troubles come when we use an Apache server to redirect the request (http://nba.clientOrg.xyz). In this second case, we tried using an iframe (doesn't work as it askes again for credential and create a new session), and also "Open URL in new window" displays nothing.
Our feeling is that due to the apache redirection the session is lost. Do you know any work around to solve it?
Pega 7.1.7,
Thanks and regards,
Fernando.
Message was edited by: Lochan to add Category
Pegasystems Inc.
IN
Hello Fernando,
Could you please check, if you can use a Modal dialog to display the PDF,instead of using "Open URL in new window". You may use your custom styles to increase the height and width of the Modal window.
Regarding your session lost issue, I couldn't find a solution yet. However you may check if SSO could help in this scenario.
Regards,
Ajit
Pegasystems Inc.
ES
Hi Ajit,
Many thanks for your suggestion, we also tried that approach but the same result. We have SSO via SAML, so we should be already authenticated when launching the new modal windows.
Regards,
Fernando.
Pegasystems Inc.
ES
Just to add some more details, I included some screenshots of the process and Fiddler.
Image 1: This is how it should be and how it's when no Apache redirection.
Image 2: In Fiddler we shee that there are some cookies sent to the new window
Image 3: In case we use a redirection, initially there were some cookies been captured
Just to add some more details, I included some screenshots of the process and Fiddler.
Image 1: This is how it should be and how it's when no Apache redirection.
Image 2: In Fiddler we shee that there are some cookies sent to the new window
Image 3: In case we use a redirection, initially there were some cookies been captured
Image 4: But when we open the new window to render the PDF, it's not displayed.
Image 5: In Fiddler we see there are not the JSessionID nor Pega-RULES cookies been sent to the new window
Pegasystems Inc.
AU
Can you please attach the topology diagram of the application for better understanding.
Also please attach the fiddler or network trace.
Regarding 304: If the client has performed a conditional GET request and access is allowed, but the document has not been modified, the server SHOULD respond with this status code. The 304 response MUST NOT contain a message-body, and thus is always terminated by the first empty line after the header fields.
One more thing to check is that your apache server has sticky session enabled.