fix: #exui-112: rediect to link expired login link page of state or nonce is stale #258
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
MunishSharmaHMCTS
changed the title
|
StoneBenHMCTS
approved these changes
Dec 17, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Jira link
https://tools.hmcts.net/jira/browse/EXUI-112
Change description
When a user visits the manage-case url for the first time they are immediately redirected to IDAM to login. If at that point the user bookmarks the IDAM url ("hmcts-access.service.gov.uk" in prod) then that bookmark will incude the State and Nonce values that XUI generated. Whenever a user revisits that bookmark they will experience the following flow:
Users visits bookmarked URL and see login page
User successfully logs in using IDAM
IDAM redirects back to XUI manage-case callback
XUI doesn't recognise the State and redirects back to IDAM with new State (and Nonce)
IDAM displays log in page
User successfully logs in using IDAM
IDAM redirects back to XUI manage-case callback
XUI displays cases
This ticket extends: EUI-4584
To understand the business impact, as part of the aforementioned ticket, we added logging into application insights, which can be seen [here|https://portal.azure.com/?whr=live.com#@HMCTS.NET/resource/subscriptions/8999dec3-0104-4a27-[…].Insights/components/xui-webapp-appinsights-prod/logs]
Checklist