Session Time Out

thom · Post by **thom** » Mon Mar 09, 2009 6:59 am

I have added a URL call to Aware from an external page (using an IFRAME) - it goes to the login, and then the proper object edit appears after login in is completed

Everything seems to be working if I use FireFox, but when I use IE, I get the login object and after logging in I get a "Session Timed Out".

Is this function supported in both browsers, or should I implement this differently

thanks

aware_support · Post by **aware_support** » Mon Mar 09, 2009 7:13 am

What is your build number?

thom · Post by **thom** » Mon Mar 09, 2009 7:57 am

aware_support · Post by **aware_support** » Tue Mar 10, 2009 12:12 am

Could you please send your BSV to [email protected] and describe how to reproduce the problem?

pbrad · Post by **pbrad** » Tue Mar 10, 2009 1:39 am

Hi,

I had a similar problem a while ago. If you clear your temporary internet files including all cookies I think that the problem will go away.

Cheers,
Pete

ACDC · Post by **ACDC** » Wed Apr 08, 2009 6:23 pm

Hi

Is there a solution to this problem as I am having the exact same problem.

tford · Post by **tford** » Wed Apr 08, 2009 6:59 pm

Does this help?

http://www.awareim.com/forum/viewtopic.php?t=2817

ACDC · Post by **ACDC** » Wed Apr 08, 2009 8:06 pm

Hi Tom

Yes that did solve the problem, and by the way the problem also exists in the Safari browser. So in both instances the user has to know about setting the session option.

Problem: what happens if the user does not know this ? for example I have an Aware feedback form embedded in an Iframe on a third party website. When a user chooses to submit feedback, they experience the session timeout problem - So this is a major problem for a "passing by customer /guest" type of application

maybe support can comment on whether there is a way around the session requirement and just use a cookies as suggested in one of the comments

rgds

ACDC · Post by **ACDC** » Wed May 06, 2009 8:26 pm

When placing an Aware Form in a IFrame located on a third party site, the application almost all of the time will not run due to a "Session Timeout".

This is due to the default settings in IE and Safari, not to allow third party cookies . FF is okay as it allows third party cookies by default

The problem can be solved by implementing a compact P3P cookie policy and inserting the policy details into the web.xml file in
AwareIM/Tomcat/webapps/AwareIM/WEB-INF directory

Build 1197 now supports P3P Compact Cookie Policy details in the the http header.

tford · Post by **tford** » Thu May 07, 2009 5:10 pm

ACDC,

Can you provide any more details about how to implement the "compact P3P cookie policy" you mentioned?

ACDC · Post by **ACDC** » Thu May 07, 2009 7:34 pm

This link provided me with a good understanding of what a P3P compact policy is all about http://www.oreillynet.com/pub/a/javascr ... 4/p3p.html

To create the policy, somewhere in the article there is a link to IBMs free P3P policy creator. Download the program and create your P3P policy. (its a simple process)

There's also numerous online services to create the policy e.g. http://www.p3pwriter.com , but you have to pay

Then insert the "CP=....." part of the policy into the Web.xml file located located in the AwareIM/Tomcat/webapps/AwareIM/WEB-INF directory:

Example:

<context-param>
<param-name>cookie-policy</param-name>
<param-value>NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM</param-value>
</context-param>

B.T.W, you could use the the above example as your policy, but it will not reference your companies Private Policy. So it depends how you interpret the legalities of having a fake policy on your server.

You can test your http header by using the free utility at http://www.p3pwriter.com/LRN_122.asp.

Hope that makes sense

tford · Post by **tford** » Thu May 07, 2009 7:56 pm

Thanks VERY MUCH for the clear road map! Much appreciated!

tford · Post by **tford** » Sat May 23, 2009 5:49 pm

I made the change ACDC recommended & IE now works with iFrame. Safari is still an issue, but used so little that I am not concerned about it.

leopdurr · Post by **leopdurr** » Sat May 28, 2011 5:22 pm

The link posted above work to resolve this issue which is
http://www.awareim.com/forum/viewtopic.php?t=2817

My form load but not the Attributes. All I am seeing for the forms is the Save and Cancel button

Anyone can fix this.

roxmer · Post by **roxmer** » Fri Sep 28, 2012 8:36 am

I got it!
The problem was that I'm working with 2 environments: test and production.
When I imported the test BS into the production BS I forgot to change the "Timeout page" in the BS version properties. It was directing to the test BS which is not the default BS. That's why it was asking for the BS name.
It there a way to just skip the login window when the timeout occurs in the guest perspective?