Re: [Engine-devel] UI Plugin API improvements

5 Apr 2013

      Just to reply to my own question, I've done some further investigation and it appears that the session wasn't timing out. It looks like the request from the heartbeat itself was causing the session to be invalidated and a new session to be created. When I modified the code to stop the heartbeat I was able to use the session without problem. 

Looking at the requests from the browser, it appears that Jboss is creating a new session with each request. I'm guessing this is a side effect of a combination of the basic authentication information in the header and the server essentially re-authenticating on each request and generating a new session ID to prevent session fixation security issues.

Has anyone else used the REST session ID that is provided through the plugin API? Have you run into this issue? I think the overall issue is exacerbated by the fact that we are making calls outside of the context of the client from our server and don't have the basic authentication header information. Because the client has this, all requests are re-athenticated whether the REST session ID is valid or not. My calls are getting blocked.

Any ideas on how to fix this? A change in the Jboss settings maybe?

-Chris
...
-----Original Message-----
From: Morrissey, Christopher
Sent: Tuesday, April 02, 2013 7:18 PM
To: 'Vojtech Szocs'; engine-devel
Cc: Spenser Shumaker; René Koch
Subject: RE: [Engine-devel] UI Plugin API improvements
Great job on the dialog support, Vojtech! It's working very well for me.
I am having an issue with the REST session ID that I haven't been able to nail
down. It seems to be timing out rather quickly. Somewhere between 15 and
30 seconds if I don't use it explicitly. I've seen the code that is scheduled to
run every minute to keep it alive, but it looks like the timeout is happening so
quickly that the heartbeat can't keep it alive. Any idea on why this would be
happening?
-Chris
...
-----Original Message-----
From: engine-devel-bounces@ovirt.org [mailto:engine-devel-
bounces@ovirt.org] On Behalf Of Vojtech Szocs
Sent: Thursday, March 28, 2013 11:25 AM
To: engine-devel
Cc: Spenser Shumaker; René Koch; Morrissey, Christopher
Subject: [Engine-devel] UI Plugin API improvements
Hi guys,
I've just merged some UI Plugin patches that improve existing API
functions, as well as add some new API functions. Please read on to learn
what's new.
Modal dialog API
================
Function improved: showDialog
New signature:
    showDialog(title, dialogToken, contentUrl, width, height [,
options])
Example usage:
    showDialog('My Dialog', 'my-dialog', 'http://www.foobar.com/',
'800px', '600px', {
            // Default value = empty array (no buttons)
            buttons: [
                {
                    label: 'Do stuff',
                    onClick: function() {
                        alert('Bump!');
                    }
                }
            ],
// Default value = false
            resizeEnabled: true,
// Default value = true
            closeIconVisible: true,
// Default value = true
            closeOnEscKey: true
    });
Notable changes:
* modal dialogs now look & feel the same as standard WebAdmin dialogs
* width & height are strings containing CSS units
* the reason why buttons default to empty array is to give plugin
authors the choice to provide custom buttons (or similar input
elements) via dialog content (iframe), and use HTML5
window.postMessage to call the plugin (coming soon!)
--
New function: setDialogContentUrl
New signature:
    setDialogContentUrl(dialogToken, contentUrl)
Example usage:
    setDialogContentUrl('my-dialog', 'http://www.example.com/')
--
New function: closeDialog
New signature:
    closeDialog(dialogToken)
Example usage:
    closeDialog('my-dialog')
Tab API
=======
Functions improved: addMainTab & addSubTab
New signatures:
    addMainTab(label, historyToken, contentUrl [, options])
    addSubTab(entityTypeName, label, historyToken, contentUrl [,
options])
Example usage:
// Tab is left-aligned by default
    addMainTab('Foo Tab', 'foo-tab', 'http://www.foo.com/');
// Tab is right-aligned via options object
    addSubTab('VirtualMachine', 'Bar Tab', 'bar-tab', 'http://www.bar.com/',
{
        alignRight: true
    });
--
Regards,
Vojtech
_______________________________________________
Engine-devel mailing list
Engine-devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-devel