Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2018-05-03 01:41:42 GMT <alfbot> fcorti: Sent 4 hours and 13 minutes ago: <digcat> thought this was appropriate https://static.growthbot.org/cartoons/weekly/hippo-decisions.jpg

2018-05-03 06:50:39 GMT <fcorti> ~later tell digicat Indeed! :-D Not necessarily in Alfresco but my experience it is more similar to something like this: https://youtu.be/a3QGwTcyRLQ

2018-05-03 06:50:39 GMT <alfbot> fcorti: The operation succeeded.

2018-05-03 07:16:48 GMT <yreg> Good morning

2018-05-03 07:19:01 GMT <digcat> hehe, love it

2018-05-03 07:25:02 GMT <niharika_> hi all

2018-05-03 07:29:04 GMT <niharika_> I am trying to add the css in repo side ftl by using the following https://pastebin.com/JUZudDWT

2018-05-03 07:29:05 GMT <alfbot> Title: <@standalone> <@markup id="css" > <#-- CSS Dependencies --> <@ - Pastebin.com (at pastebin.com)

2018-05-03 07:29:54 GMT <niharika_> but it is throwing the exception "The following has evaluated to null or missing: ==> standalone [in template "eu/xfel/make-public/doclist.get.html.ftl" at line 1, column 3]"

2018-05-03 07:30:17 GMT <niharika_> can anyone tell me how to add the css in repo side ftl

2018-05-03 07:31:00 GMT <angelborroy> repository part has no extension for FTL

2018-05-03 07:31:15 GMT <angelborroy> you can only overwrite resources but you cannot extend in the same way it’s done in Share

2018-05-03 07:34:46 GMT <niharika_> so,is there any way I can add my external css in repo side html ftl file

2018-05-03 07:35:00 GMT <angelborroy> which resource are you trying to modify?

2018-05-03 07:35:22 GMT <angelborroy> before, what are you trying to do?

2018-05-03 07:35:46 GMT <angelborroy> Repo part (nowadays) has only web scripts because it’s basically an API REST

2018-05-03 07:38:42 GMT <niharika_> I want to beautify the rows of a table by using nth class in css by using the following

2018-05-03 07:38:44 GMT <niharika_> #table tr:nth-child(even){background-color: #4CAF50;}

2018-05-03 07:39:03 GMT <angelborroy> but where is the table show?

2018-05-03 07:39:09 GMT <angelborroy> in the Node Browser?

2018-05-03 07:39:20 GMT <angelborroy> which page are you modifying?

2018-05-03 07:40:01 GMT <niharika_> I have built by custom page which is used for sharing the contents of the folder

2018-05-03 07:40:17 GMT <angelborroy> and you are developing this page in repo part?

2018-05-03 07:40:19 GMT <angelborroy> why?

2018-05-03 07:41:11 GMT <angelborroy> anyway, take a look at https://github.com/OrderOfTheBee/ootbee-support-tools/tree/master/repository/src/main/amp

2018-05-03 07:41:12 GMT <alfbot> Title: ootbee-support-tools/repository/src/main/amp at master · OrderOfTheBee/ootbee-support-tools · GitHub (at github.com)

2018-05-03 07:41:18 GMT <angelborroy> Probably this is what you are looking for

2018-05-03 07:41:47 GMT <niharika_> when we clicks on our action,a repo side webscript is called which shows the contents of the folder

2018-05-03 07:42:01 GMT <niharika_> the table is as follows

2018-05-03 07:42:07 GMT <angelborroy> this is what I thought

2018-05-03 07:42:20 GMT <angelborroy> so you need to develop a page in Share part, not in repo part

2018-05-03 07:42:21 GMT <angelborroy> right?

2018-05-03 07:42:32 GMT <niharika_> https://pastebin.com/R9sTYDLS

2018-05-03 07:42:33 GMT <alfbot> Title: <table> <tr> <#if child.isDocument> <td> <a href="${url - Pastebin.com (at pastebin.com)

2018-05-03 07:43:15 GMT <niharika_> I just want to add the css in the page

2018-05-03 07:43:34 GMT <angelborroy> again: you need to develop this page in a Share project

2018-05-03 07:43:59 GMT <angelborroy> are you deploying your extension to share.war?

2018-05-03 07:45:26 GMT <niharika_> instead of developing the page in share side,is there any other way to add the css in repo side html ftl file

2018-05-03 07:45:55 GMT <angelborroy> no, repo side only returns a view without css

2018-05-03 08:03:32 GMT <yreg> niharika_, there is indeed a way

2018-05-03 08:03:52 GMT <yreg> Are you using the SDK for your development ??

2018-05-03 08:04:34 GMT <yreg> And which version of the SDK, the location for putting CSS/Js assets would highly rely on these informations

2018-05-03 08:09:36 GMT <yreg> angelborroy, I had a discussion with ole about this a while ago, and it turns out the SDK supports this for both jars and amps, you just need to use a special location

2018-05-03 08:09:56 GMT <angelborroy> I don’t think so

2018-05-03 08:10:10 GMT <angelborroy> So you are serving a CSS from repo to be shown in Share?

2018-05-03 08:10:18 GMT <angelborroy> I could be done, but it’s a nonsense

2018-05-03 08:10:40 GMT <angelborroy> The right approach is to server JSON from repo and to build the page (HTML + CSS) in Share

2018-05-03 08:10:50 GMT <angelborroy> server > serve

2018-05-03 08:23:09 GMT <niharika_> yreg I am using SDK 3 for development

2018-05-03 08:23:37 GMT <niharika_> where should I put my css in repo side

2018-05-03 08:28:37 GMT <niharika_> angelborroy,I will try https://github.com/OrderOfTheBee/ootbee-support-tools/tree/master/repository/src/main/amp and will let u know the results

2018-05-03 08:28:38 GMT <alfbot> Title: ootbee-support-tools/repository/src/main/amp at master · OrderOfTheBee/ootbee-support-tools · GitHub (at github.com)

2018-05-03 08:33:58 GMT <angelborroy> niharika_ That link is to show pages (with CSS) in the repo part (/alfresco)

2018-05-03 08:34:12 GMT <angelborroy> What I understood is that you want to add CSS to Share pages (/share)

2018-05-03 08:34:19 GMT <angelborroy> So it will not fit your requirements

2018-05-03 08:41:59 GMT <niharika_> no,I just want to add css in the repo side ftl

2018-05-03 08:43:02 GMT <angelborroy> so you are accessing that page from http://localhost:8080/alfresco/…

2018-05-03 08:43:03 GMT <angelborroy> right?

2018-05-03 08:43:27 GMT <angelborroy> Your user is browsing that URL?

2018-05-03 08:44:11 GMT <niharika_> yes

2018-05-03 08:46:33 GMT <angelborroy> ok, then ootbee-support it’s right for you

2018-05-03 08:56:00 GMT <yreg> Sorry, I was in a meeting

2018-05-03 09:00:50 GMT <yreg> It should go into meta-inf

2018-05-03 09:02:12 GMT <yreg> Something like : src/main/resources/META-INF/resources/test.css

2018-05-03 10:42:19 GMT <niharika_> yreg,okie ,but how to define the stylesheet in ftl file

2018-05-03 10:54:05 GMT <AFaust> niharika_: I don't understand what is the problem. angelborroy already linked you to ootbee-support-tools, and there you can find examples like https://github.com/OrderOfTheBee/ootbee-support-tools/blob/master/repository/src/main/amp/config/alfresco/templates/webscripts/org/orderofthebee/support-tools/admin/admin-template.ftl#L59 where you can see that you simply have to generate the HTML link / script tags yourself for inclusion

2018-05-03 10:54:05 GMT <AFaust> of JS / CSS

2018-05-03 10:54:06 GMT <alfbot> Title: ootbee-support-tools/admin-template.ftl at master · OrderOfTheBee/ootbee-support-tools · GitHub (at github.com)

2018-05-03 10:54:58 GMT <niharika_> but that is not working

2018-05-03 10:55:23 GMT <niharika_> I have added <head> <link rel="stylesheet" type="text/css" href="${url.context}/folder-share-lnk/css/doclist.css" /> </head>

2018-05-03 10:55:30 GMT <niharika_> in ftl file

2018-05-03 10:55:52 GMT <niharika_> but it is not working

2018-05-03 10:58:16 GMT <AFaust> So debug why it doesn't. The approach is the correct one to take, so you must have made a mistake somewhere. Are the paths of your files correct? Are the URLs correct?

2018-05-03 10:58:56 GMT <AFaust> Are there issues with cross-origin resource access?

2018-05-03 11:01:39 GMT <AFaust> Note that ootbee-support-tools does not put any resources in JAR META-INF, instead bundling them properly in the AMP

2018-05-03 11:02:18 GMT <AFaust> As far as I am aware, there is no resource loader in Repository-tier which supports loading from within JAR files...

2018-05-03 11:06:36 GMT <AFaust> yreg: SDK supports this for both JARs and AMPs, but Repository does not - only Share does

2018-05-03 11:21:53 GMT <yreg> AFaust, I just tried it out and it worked like a charm

2018-05-03 11:22:26 GMT <AFaust> Which Alfresco version and what type of URL did you use?

2018-05-03 11:22:38 GMT <yreg> Any file from the location I listed should be accessible from the alfresco context

2018-05-03 11:22:50 GMT <yreg> It doesn't work with hot-reloading

2018-05-03 11:23:01 GMT <AFaust> I don't care about stupid hot reloading

2018-05-03 11:23:04 GMT <yreg> But once you kill maven and re-run it works

2018-05-03 11:23:17 GMT <yreg> http://localhost:8080/alfresco/test.css

2018-05-03 11:23:18 GMT <AFaust> I want to know if it works in a "real" server

2018-05-03 11:23:29 GMT <AFaust> I.e. when deployed outside of Maven

2018-05-03 11:24:05 GMT <yreg> Actually any newly generated project using the sdk archetype should have a test.html in the location I shared

2018-05-03 11:24:12 GMT <AFaust> I know that...

2018-05-03 11:24:25 GMT <AFaust> I want to know if it works without any of the hacks that the SDK uses...

2018-05-03 11:24:26 GMT <yreg> And that should be accessible through http://localhost:8080/alfresco/test.html without any issues

2018-05-03 11:25:05 GMT <AFaust> "should"...

2018-05-03 11:25:08 GMT <yreg> I am on ACS 5.2.3 but I can confirm that I had it working with both CE and EE before with 5.1.x and 5.2.x

2018-05-03 11:25:16 GMT <AFaust> On a real server?

2018-05-03 11:25:40 GMT <yreg> AFaust, of course, as long as the path does not clash with any rewrite or any servlet

2018-05-03 11:26:11 GMT <yreg> So if your path has s/ or service/ or api/ ... it won't work

2018-05-03 11:26:24 GMT <AFaust> So then the question is - what component of Repository makes this possible, because in Share it is the duty of the special /res/ mapped ResourceController, which AFAIK does not exist in repo

2018-05-03 11:26:57 GMT <yreg> Aside from that, yes, on a real server..

2018-05-03 11:27:05 GMT <yreg> Let me look that up a bit

2018-05-03 11:28:39 GMT <AFaust> Looking at web.xml I can see no filter mapping that could do that

2018-05-03 11:29:43 GMT <AFaust> only the global localization filter is mapped to /*

2018-05-03 11:39:28 GMT <yreg> AFaust, Have also inspected all web fragments ...

2018-05-03 11:40:02 GMT <yreg> In any case, I have a remote server, installed using the linux installer (a test environment)

2018-05-03 11:40:32 GMT <yreg> And I can confirm that test.html is reachable and it gives the right output

2018-05-03 11:40:48 GMT <yreg> Though, it needs to be removed from the actual project :P

2018-05-03 11:40:58 GMT <AFaust> Without knowing how this is supposed to work I can not trust / recommend that...

2018-05-03 11:41:29 GMT <yreg> AFaust, I looked into it with ohej

2018-05-03 11:41:44 GMT <AFaust> Might be a "happy accident" due to some internal config that was not intentional

2018-05-03 11:42:07 GMT <yreg> It's actually mapped as part of the class path for static resources

2018-05-03 11:42:51 GMT <yreg> Nope, it was made intentionally when the jar packaging was first introduce if I remember right

2018-05-03 11:42:59 GMT <yreg> Somewhere around sdk2.x

2018-05-03 11:44:50 GMT <AFaust> Still - where is it mapped?

2018-05-03 11:45:44 GMT <AFaust> i.e. is it something that only works for the default install or also if you downloaded and deployed the WAR manually?

2018-05-03 11:49:26 GMT <yreg> I had it working with custom installs as well

2018-05-03 11:49:34 GMT <yreg> Don't be so German :P

2018-05-03 11:50:52 GMT <AFaust> Ok, but can I please still be professional and use / rely on only those features that I understand?

2018-05-03 11:58:23 GMT <yreg> Ok

2018-05-03 11:58:31 GMT <AFaust> Ok - verified in a 201707 GA, but still - how?

2018-05-03 11:59:13 GMT <AFaust> So, apparently this is nothing that Alfresco has done / changed

2018-05-03 11:59:44 GMT <AFaust> It is standard servlet 3.0

2018-05-03 12:03:07 GMT <AFaust> Servlet 3.0 spec, sections 4.6, 10.5

2018-05-03 12:04:32 GMT <AFaust> So, it worked in 5.1 "by accident" because Tomcat applied Servlet 3.0 behaviour even if Alfresco Repository was still marked as a Servlet 2.4 application

2018-05-03 12:05:38 GMT <AFaust> Does anyone know where the current sources for the project formerly known as "web-client" are located? Can't find such a repo on GitHub

2018-05-03 12:07:24 GMT <AFaust> In 5.2 / 201707 at least, Repository is properly marked as a Servlet 3.0 application, so this would be the first version this worked "correctly" / "as intended"

2018-05-03 12:08:59 GMT <AFaust> ~later tell niharika_: So, if you put your static resources in the location yreg pointed out and you are using Alfresco 5.1/5.2, then it does work (provided your URLs are correctly reflecting your folder structure)

2018-05-03 12:08:59 GMT <alfbot> AFaust: The operation succeeded.

2018-05-03 12:10:41 GMT <yreg> AFaust, Thanks for going through that thorough investigation!

2018-05-03 12:11:08 GMT <AFaust> German, remember...

2018-05-03 12:11:11 GMT <yreg> hehe

2018-05-03 15:28:54 GMT <MorganP> Hi guys, I wanted to try the ADF with a new application as well as with the ACA

2018-05-03 15:29:06 GMT <MorganP> I have the ADF 2.3 and I create a new app without problem

2018-05-03 15:29:28 GMT <MorganP> So I wanted to clone the ACA 1.2.0 (latest version) and start it but it's not working, I have a strange error

2018-05-03 15:29:50 GMT <angelborroy> something related with Angular CLI version?

2018-05-03 15:29:54 GMT <MorganP> For the ACA, is it necessary to build?

2018-05-03 15:29:56 GMT <MorganP> ng build?

2018-05-03 15:30:01 GMT <angelborroy> nope

2018-05-03 15:30:07 GMT <angelborroy> what is the error?

2018-05-03 15:30:17 GMT <MorganP> But I don't have ng installed and I didn't need it for the ADF 2.3 base apps..

2018-05-03 15:30:34 GMT <angelborroy> you have ng installed

2018-05-03 15:30:35 GMT <angelborroy> for sure

2018-05-03 15:31:16 GMT <MorganP> I have npm and yeoman

2018-05-03 15:32:02 GMT <yreg> MorganP, once you do npm install

2018-05-03 15:32:10 GMT <yreg> It gets installed for you

2018-05-03 15:32:23 GMT <angelborroy> https://github.com/Alfresco/alfresco-ng2-components/blob/master/demo-shell/package.json#L7

2018-05-03 15:32:24 GMT <alfbot> Title: alfresco-ng2-components/package.json at master · Alfresco/alfresco-ng2-components · GitHub (at github.com)

2018-05-03 15:32:31 GMT <yreg> MorganP, the guys on hitter are quite helpful

2018-05-03 15:32:33 GMT <angelborroy> You have ng, believe me

2018-05-03 15:33:18 GMT <angelborroy> I’ve made

2018-05-03 15:33:20 GMT <angelborroy> git clone

2018-05-03 15:33:30 GMT <angelborroy> cd alfresco-content-app

2018-05-03 15:33:31 GMT <angelborroy> npm install

2018-05-03 15:33:33 GMT <angelborroy> npm start

2018-05-03 15:33:37 GMT <angelborroy> and it’s working

2018-05-03 15:34:10 GMT <yreg> MorganP, you might face some problems if you are on a bleeding edge node version

2018-05-03 15:34:24 GMT <yreg> I am using node 9.X and it's fine

2018-05-03 15:34:36 GMT <angelborroy> I’m using 9.11.1

2018-05-03 15:34:38 GMT <MorganP> I took the LTS

2018-05-03 15:34:41 GMT <MorganP> 8.11.1 I think

2018-05-03 15:34:46 GMT <MorganP> it says it is supported

2018-05-03 15:34:57 GMT <yreg> I am on the same one as angelborroy

2018-05-03 15:35:21 GMT <yreg> I had problems with node 10 some time ago

2018-05-03 15:35:30 GMT <MorganP> ok it was the npm install... I did it for my own app but I thought it was only a 1 time action

2018-05-03 15:35:33 GMT <yreg> So I switched back to 9

2018-05-03 15:35:47 GMT <MorganP> it's needed for each apps before the start, thx

2018-05-03 15:35:52 GMT <yreg> urw

2018-05-03 15:36:11 GMT <angelborroy> MorganP you hava also a docker-compose in ACA project ready to start everything together

2018-05-03 15:36:22 GMT <angelborroy> so you don’t need a local installation of Alfresco with CORS

2018-05-03 15:36:38 GMT <MorganP> I'm using our production alfresco

2018-05-03 15:36:46 GMT <angelborroy> wow

2018-05-03 15:36:51 GMT <angelborroy> you are brave!

2018-05-03 15:37:02 GMT <MorganP> I'm not dvlp anything

2018-05-03 15:37:11 GMT <angelborroy> I keep apart all this ADF stuff from working envs

2018-05-03 15:37:12 GMT <angelborroy> :D

2018-05-03 15:37:18 GMT <MorganP> just for login to see how it works and how it looks like

2018-05-03 15:37:31 GMT <angelborroy> you can use that Docker Compose, it’s safer

2018-05-03 15:37:43 GMT <MorganP> but I will start the dev tomorrow to play with it

2018-05-03 15:44:46 GMT <yreg> MorganP, a piece of advice for peace of mind and easier maintenance/evolution of your app

2018-05-03 15:45:16 GMT <yreg> Don't use tacky solutions, stick to the supported extension mechanisms of the components you have

2018-05-03 15:45:38 GMT <angelborroy> Wow! Can you describe “extension mechanisms” for ACA?

2018-05-03 15:45:43 GMT <MorganP> ^^

2018-05-03 15:45:48 GMT <angelborroy> yreg I’m very interested in that!

2018-05-03 15:46:21 GMT <yreg> And whenever they come short (and they do quite often, whenever you try something a little bit more complex than what's showcased in ACA), try to extend the original component to have an extension point making your use case possible

2018-05-03 15:46:29 GMT <MorganP> Don't worry, I'm not going to do any fancy stuff, I just want to play a minimum with it to understand it at least a little bit but I don't really want to work with it...

2018-05-03 15:46:58 GMT <yreg> I meant extension point (sorry for the confusion)

2018-05-03 15:47:17 GMT <angelborroy> I was joking :D

2018-05-03 15:47:37 GMT <yreg> Once you issue a PR with your changes, it usually gets addressed quite fast, and you export its maintenance to the alfresco team and benefit from easier upgrades

2018-05-03 15:48:20 GMT <angelborroy> Are you using ADF stuff in PROD yreg?

2018-05-03 15:48:24 GMT <yreg> Otherwise ADF upgrades will become a nightmare

2018-05-03 15:48:36 GMT <angelborroy> ADF upgrades are a nightmare

2018-05-03 15:48:42 GMT <angelborroy> with or without care

2018-05-03 15:48:53 GMT <yreg> angelborroy, they can be a hell a lot easier ....

2018-05-03 15:49:15 GMT <yreg> I am not, my team is going to make a prod deploy this weekend

2018-05-03 15:49:32 GMT <angelborroy> really surprised about that

2018-05-03 15:49:35 GMT <yreg> I only contributed the SAML LoginComponent to the project :P

2018-05-03 15:49:42 GMT <angelborroy> small installation?

2018-05-03 15:49:59 GMT <angelborroy> I’m really insterested in how to deploy this stuff in cluster envs

2018-05-03 15:50:53 GMT <yreg> -= THIS MESSAGE NOT LOGGED =-

2018-05-03 15:51:15 GMT <yreg> angelborroy, this will actually be an AWS cluster

2018-05-03 15:51:33 GMT <yreg> angelborroy, What's so special about that ?

2018-05-03 15:51:46 GMT <angelborroy> Session/Auth sharing

2018-05-03 15:51:56 GMT <angelborroy> I thinkt that it’s not provided by ADF by now

2018-05-03 15:52:02 GMT <yreg> Isn't that done in repo ?

2018-05-03 15:52:18 GMT <angelborroy> I don’t know, is it?

2018-05-03 15:52:34 GMT <yreg> AFAIK it is

2018-05-03 15:52:40 GMT <angelborroy> But how?

2018-05-03 15:52:50 GMT <angelborroy> The repo has a session

2018-05-03 15:52:56 GMT <yreg> Unlike share, ADF is stateless, there is no session at all

2018-05-03 15:53:06 GMT <angelborroy> mmmm

2018-05-03 15:53:14 GMT <angelborroy> I don’t buy that

2018-05-03 15:53:16 GMT *** rluders_ is now known as rluders

2018-05-03 15:54:08 GMT <yreg> When you login, you actually grab a ticket and store it in the local storage (in case you refresh the page, that one comes handy) and configure the alfresco-js-api with that same ticket so that it gets used for all following REST calls

2018-05-03 15:54:25 GMT <angelborroy> this is the point...

2018-05-03 15:54:26 GMT <MorganP> if you use different adf apps, you stay logged in

2018-05-03 15:54:36 GMT <angelborroy> … and what if I change the node

2018-05-03 15:54:36 GMT <yreg> The repo does cluster a lot of caches, and AFAIK tickets are part of that

2018-05-03 15:54:45 GMT <angelborroy> I know

2018-05-03 15:55:00 GMT <angelborroy> But if I logged in and ...

2018-05-03 15:55:04 GMT <yreg> MorganP, that's the local storage prop I was talking about

2018-05-03 15:55:13 GMT <angelborroy> … following request is served by

2018-05-03 15:55:16 GMT <angelborroy> my ticket is lost

2018-05-03 15:55:19 GMT <MorganP> Yes that's why I said that yreg :D

2018-05-03 15:55:32 GMT <MorganP> I was surprised I was still logged in when I started the 2nd app

2018-05-03 15:55:37 GMT <angelborroy> so they are using local storage in the browser?

2018-05-03 15:56:17 GMT <angelborroy> That makes sense

2018-05-03 15:56:26 GMT <yreg> angelborroy, yes, but that's only checked once you refresh your browser / open new tab/window

2018-05-03 15:57:05 GMT <yreg> angelborroy, I made the SAML LoginComponent, and I know what I am talking about ;-)

2018-05-03 15:57:13 GMT <angelborroy> of course

2018-05-03 15:57:21 GMT <angelborroy> I was trying to understand

2018-05-03 15:57:25 GMT <angelborroy> Thanks for the explanation

2018-05-03 15:58:23 GMT <yreg> Now that I am checking the caches.properties, it can become a problem if there is more 1000 concurrent users (unless caches are tuned for a bigger value)

2018-05-03 15:58:41 GMT <angelborroy> This is what I think about local storage: https://www.rdegges.com/2018/please-stop-using-local-storage/

2018-05-03 15:58:42 GMT <alfbot> Title: Randall Degges - Please Stop Using Local Storage (at www.rdegges.com)

2018-05-03 15:58:59 GMT <yreg> So we probably need to take that into account, thanks for pointing that out angelborroy

2018-05-03 16:01:16 GMT <yreg> angelborroy, it depends on the use case

2018-05-03 16:01:31 GMT <yreg> Local storage was created for a reason right ?

2018-05-03 16:04:17 GMT <angelborroy> yes

2018-05-03 16:04:28 GMT <angelborroy> but it was not to store credentials

2018-05-03 16:05:23 GMT <yreg> I just read through the arguments, it doesn't store any credentials, just the alf_ticket which gets invalidated automatically every 30m and should be renewed (although ADF doesn't support that just yet)

2018-05-03 16:05:45 GMT <angelborroy> a ticket is a credential

2018-05-03 16:05:55 GMT <angelborroy> but it’s only my opinion

2018-05-03 16:06:50 GMT <yreg> That alf_ticket isn't accessible from any script that couldn't access your cookies or register a listener on all XHR calls and intercept the response of the login request (even the credentials used for that authentication)

2018-05-03 16:07:43 GMT <yreg> even when you delete that local storage item, your application continues to work without issues including routing to different screens

2018-05-03 16:08:01 GMT <yreg> It just comes short as soon as you refresh/use a different tab

2018-05-03 16:08:48 GMT <yreg> angelborroy, what's your feeling about session cookie ?

2018-05-03 16:10:10 GMT <yreg> Ah sorry, it seems I didn't go all the way to the bottom of that blog let me continue reading :P

2018-05-03 16:10:22 GMT <angelborroy> it’s a nice blog

2018-05-03 16:10:28 GMT <angelborroy> I liked it when I read it

2018-05-03 16:11:21 GMT <angelborroy> for me httpOnly is a must when using cookies

2018-05-03 16:19:10 GMT <yreg> ~later tell angelborroy interesting wasn't aware of that setting, and it makes good argument, but still I think the gain is minimal, I believe that blog was intended for websites, not for enterprise applications... I wouldn't expect anyone to use a remote js file (query or alike) within an ADF app

2018-05-03 16:19:10 GMT <alfbot> yreg: The operation succeeded.

2018-05-03 16:21:30 GMT <yreg> ~later tell angelborroy here is a horror story for you : https://hackernoon.com/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5

2018-05-03 16:21:30 GMT <alfbot> yreg: The operation succeeded.

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco