sso.aspx does not accept htmlencoded urls

web-app

Hi,

I'm trying to get the single sign on solution to work with an iframe. Building the url is no problem, however, when using that url in an iframe, it does not work. Suppose the sso url is like this: http://gemini.domain.com/sso.aspx?u=test&p=test, when passing that url to an iframe (from asp.net code behind), iframe will look like this:

the htmlencoded "&" (&) is aparently not accepted by the sso.aspx page.. i keep getting the logon page. I know the url is correct, the first one logs me on immediately. I am using the clear text sso option, however, the problem is the same for the HASHED option.

Can someone confirm if this is indeed a problem with sso.aspx?

cheers,

Erik

erikvb · 1
Monday, July 3, 2006, 5:12:02 PM

Replies (5)

What error do you get?

This should work fine.

Saar Cohen · 5000
Monday, July 3, 2006, 11:44:25 PM

I would expect this to work fine as well.

If i navigate to either of the urls directly in the browsers, this one redirects me to the logon screen:

http://gemini.apollo-software.net/sso.aspx?u=test&p=test

and the url becomes: http://gemini.apollo-software.net/Default.aspx?ReturnUrl=%2fMain.aspx%3fu%3dtest%26amp%253bp%3dtest&u=test&amp%3bp=test

on the other hand, this url logs me on just fine:

http://gemini.apollo-software.net/sso.aspx?u=test&p=test

(you can see for yourself, the urls are live ;))

for the record, i am using Gemini 2.0.5

Cheers,

Erik

erikvb · 1
Tuesday, July 4, 2006, 9:22:04 AM

I see what you are saying. This will obviously not work as the p parameter is missing.

Saar Cohen · 5000
Wednesday, July 5, 2006, 12:22:21 AM

uhm.. yes thats what i could think of as well... let me describe my problem:

i am getting the userid and pw from the db, and use those values to dynamically (from code behind) set the src parameter of an iframe. Nothing i can do stops asp.net from htmlencoding the amparsand in the url, so the wrong querystring gets passed.

the only other idea i can think of is setting the iframe src from javascript instead..

Am i making some major mistake here in my thinking?

Cheers,

Erik

erikvb · 1
Wednesday, July 5, 2006, 12:32:44 AM

I have made an IFrame with the src property hardcoded in a html file

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
    <HEAD>
        <title>WebForm1</title
    </HEAD>
    <body >
        <iframe id="frmSomeName" src="http://gemini.apollo-software.net/sso.aspx?u=test&p=test" style="WIDTH: 312px; HEIGHT: 288px"></iframe>
    </body>
</HTML>

and it didnt work for me. yet loading the url directly into a browser does work. Also, writing out the HTML using a literal also did not appear to work. code below uses an HTML control and Literal, first adds the amp; stuff, 2nd just & but still directed to log in screen.

    Private Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        Dim S As New System.Text.StringBuilder
        S.Append("http://gemini.apollo-software.net/sso.aspx?u=")
   'Add UserName
        S.Append("test")
        S.Append("&p=")
   'Add Password
        S.Append("test")

        Me.frmSomeName.Attributes.Add("src", S.ToString)
        Me.Literal1.Text = "<iframe runat=""server"" id=""frmSomeName"" src=""" & S.ToString & """ style=""WIDTH: 312px; HEIGHT: 288px""></iframe>"
    End Sub

maybe some of this might help

Simon@MailboxPro · 1
Wednesday, July 5, 2006, 12:14:04 PM

Gemini Community Support Site

sso.aspx does not accept htmlencoded urls