Session Authentication truncates the URL!

Hi,

We seem to have a problem with Session Authetication, truncating URLs that have a “#”.

Let me give you an example: -

http://www.webserver.com/demo.nsf/home?openpage#hello

Without session authentication, the URL is maintained and everyone is happy.

However with Session Authentication, once the user has entered their username and password, anything to the right of the # (inclusive), dissappears and users are not happy.

If the user is already logged in, then no problem, URL is fully displayed as normal.

However emails are generated with such links, and now Session Authentication breaks the URL.

Any ideas if this is a major “bug” with Lotus Domino, and can we work around it?

Session Authentication is really important requirement, so we can’t back track unfortunately.

Any advice welcome

Ian

Subject: Session Authentication truncates the URL!!

The #hello is a URI fragment identifier - and is used by the client (i.e. browser), and not the server. The domino server doesn’t even get that as part of URI request (if you view source of the login page and look for the RedirectTo field, it will not have the #hello value)

See URI fragment - Wikipedia for a good explanation…

Subject: RE: Session Authentication truncates the URL!!

Erik,

Thanks for the explanation.

So what you’re saying is that you can’t use Session Authentication with a URL that contains a #, because it is a URI fragment identifier (anchor link perhaps?)

Any idea how we can get around this issue?

Is this best practice when sending mail links?

Thanks

Ian

Subject: RE: Session Authentication truncates the URL!!

Yes. Don’t send links like that - unless the browsers can get directly to the URI without interruption.

If you sniff the http traffic, you’ll never see “#hello” getting sent to the server… the fragment identifier is used entirely by the client to hop back and forth on an already downloaded resource.

Subject: Session Authentication truncates the URL!!

Well I’ve done some research and still no definitive answer.

Can anyone provide any light?

Thanks

Ian