Product updates
Ideas
Groups
E-learning
Documentation
Events

Community
Search

Topics started by Bas

19 Topics

Recently active

Most views Most replies

BasVanguard

Universal GUI - elegant session timeoutOpen

As discussed in the thread below the Universal GUI currently doesn't handle session timeout's in an elegant way. If you leave a Universal GUI open it could happen that when you return to it your session has timed out. As a user you only experience this then you try to manipulate something (save data in a form that is on auto edit in our case).Wouldn't it be more desirable to run a function after the Universal GUI comes into foces that checks if the current session is still valid? That way you could handle session expiration gracefully by redirecting users to the login window before they start using the application.There is a function for this inside of react. https://reactnavigation.org/docs/function-after-focusing-screen/Previous discussion/question:

BasVanguard

Logout button on Universal Login pageClosed

Hi There,When you login through a Universal interface with an account that has no application associated with it you get stuck. You see the message that no application is available and you see a LOGIN button that doesn’t do anything. Adding a LOGOUT button would enable users to go ahead and do something. Now we have people calling us because there stuck.

BasVanguard

asked in Questions & Conversations

Run query at login (without start object)

We have a client that uses openId. Unfortunatly the claims response doesn't provide all the information needed to be able to determine the user groups a user needs to have assigned. We need to make a call to another system to retrieve the information to determine this.For now we run the logic to determine this and adjust user groups when the user clicks a menu item. What we would like to do is run this logic as soon as possible after the login. Best would be before menu items are loaded.Is this possible? Or is there an alternative that we didn't think of?

BasVanguard

Placeholder config files to make updates easier.Open

Instead of including config.json, web.config and appsettings.json files that break my instance after installing an update include them with a default_ or example_ prefix.That way I can just take the folder with the new Universal files and have someone paste them over the old ones. Now I constantly need to assist the IT staff because we don’t have access to the application servers.You should only need to touch settings files at the original point of installation and when something changes in said settings.

BasVanguard

asked in Questions & Conversations

Session Timeout universal GUI

Hi there,a client has come back to us with a finding that we don't know how to deal with.The ticket states that you can have the Universal GUI open in a tab al day long. If you get back to the GUI it could be that your session has timed out in the background. This only becomes apparant when you try to save the data you have just entered. Our application default back to a form in edit mode so people can keep on working as fast as possible.What is the normal behaviour of the Universal GUI in this situation? Shouldn't it detect that it's session has expired and direct users to the login screen before users are able to interact with the GUI?If now this might be a nice feature to have. Could be implemented by doing a callback to indicium when the focus on the browser tab changes (https://reactnavigation.org/docs/function-after-focusing-screen/).

BasVanguard

asked in Questions & Conversations

Max file upload vs Max request body size - Azure Application Gateway

Hi there,we're running into a azure application gateway issue. We have an application where we can trigger a task on a record. In this task we upload an asset. The issue is that we can only upload files that are smaller then 128Kb. Between us and the application in a Azure Application Gateway. This application gateway has a policy that enables inspection of the request body. The MAX REQUEST BODY SIZE is set to 128Kb. The MAX FILE UPLOAD SIZE is set to 100Mb.Is seems that since Universal uses odata to communicate to indicium the file upload is parsed into the request body and thereby is limited to 128Kb in size. The clients IT department forwarded the following documentation that indicates the max request body size limit is 2Mb on the WAF.The other solution they suggested was changing the content-type to multipart/form-data. That way the file upload size limit of 100Mb would be applied. As we're using universal this isn't possible.Any other suggestions because needing to limit the file

BasVanguard

asked in Questions & Conversations

OpenID on one universal but not another

Hi there,for a client we have multiple interfaces to access the same application. Currently we're running two URLSclients.domain.com staff.domain.comBoth interfaces use the universal interface. Client wan't to implement OpenID for the staff to use.How do I configure the clients.domain.com Universal interface to only show the local account login and not the OpenID feature?Can't seem to find this answer in the documentation.With kind regard,Bas van Ginkel

BasVanguard

asked in Questions & Conversations

Indicium BaseUrl

Hi there,we're running a project where indicium is reachable from multiple URL's. An issue that we're seeing is the following.Client goes to subdomain.company.com Since OpenID and local accounts are active he gets a url that redirects him to subdomain.company.com/indicium/ After entering valid credentials the client is redirected to subdomain.internal.company.com/indicium/ (Logically the interface doesn't indicate the user is logged in as the domain is different.)On the subdomain.company.com/indicium/ page the close button (top right) also redirects the user to the internal domain. QuestionsCan I make indicium comply with the URL that was used to call it? This would make the internal url usable. How can I teach indicium that it has a BaseUrl I want it to use? This would make the internal url unusable. Or do I need to deploy redirect in IIS to achieve this?

BasVanguard

asked in Questions & Conversations

Universal Login - alternative form

Weird question…..We have a client that is using the Universal Interface for their application. Outside of the Universal interface we have a seperate page where clients can register themselves. This creates an IAM account that they can login with.The client would like to integrate this registration form with the login form. The would mean we create a single page outside of the thinkwise application. On this page we have a regular form and a login form. Filling in the login form should result in opening universal and automatically login using the provided username/password. Is there a route to make this possible?

BasVanguard

asked in Questions & Conversations

Indicium/Universal login flow

At a client, we’re going to deploy the universal interface in a short while. While testing the client found an interesting flow concerning login and password recovery that is undesirable.Happy flowIn the universal interface, the user clicks the password recovery link. The browser is redirected to the indicium interface. The user enters their username/email and a token gets sent out. The user enters the token and new password en hits enter. The user enters a username and password to log in. The user enters their email TOTP token. The user gets redirected to the universal interface.What happened during testing?Somehow the client manually went back to the indicium interface. And started the password recovery there. The process worked the same except he didn't get redirected to the universal interface as no redirect URL was available. They also tried to log in at the indicium interface, the login was successful but the client got stuck as they didn't have an application interface availabl

BasVanguard

Read folder (new process action type)Completed

In an action flow I have the ability to read/write/move/delete files and folders. I have no option to get a list of files inside of a folder. This would be very helpful. Currently I have an external document generator that creates PDF files and puts them on a file share. The filename convention of the generator contains a timestamp and some other variables that I am not aware of. Because of this I can’t READ FILE since I don’t know when the file was generated or what other variables are part of it’s file name.

BasVanguard

asked in Questions & Conversations

Base64 encoding

I'm having some trouble getting things to work. For a webservice we need to base64 encode our message before transmitting it. This worked fine untill we encountered a diacritical mark (ë, î, ú, etc) in the message we want to encode. Then the webservice we're contacting start throwing errors.I've created a test script to show the exact problem and to provide a starting point to hopefully find a solution to this issue. I contains a sample for a correctly encoded message and an invalid one. declare @source varbinary(max) ,@encoded varchar(max)--SAMPLE MESSAGES ONE WITH AND ONE WITHOUT DIACRITICAL MARKS DECLARE @message varchar(max) = 'Dit zijn diekrieten ë, î en ú.'; DECLARE @message2 varchar(max) = 'Dit zijn geen diekrieten e, i en u.';--KNOW CORRECT BASE64 RESULTS AS CALCULATED WITH THE OPENSSL LIBRARY DECLARE @message_base64 nvarchar(max) = 'RGl0IHppam4gZGlla3JpZXRlbiDDqywgw64gZW4gw7ou'; DECLARE @message2_base64 nvarchar(max) = 'RGl0IHppam4gZ2VlbiBkaWVrcmlldGVuIGUsIGkgZW4gdS4=';--BAS

BasVanguard

sf_product_info - previous versionCompleted

Of course we’re all very aware of the possible pitfalls when deploying a new version of our application. It does happen that we run a deploy with one cup of coffee to little and miss something.The [sf_product_info] table contains a lot of usefull information about what has been deployed, but missing in there is what previous version the deployment was based on. We recently had an issue on a non production enviroment that we had a difficult time to diagnose and even more difficult to repair. The root cause was that the environment went from version 2.55.7 to 2.55.16 but the .16 reployment was based on the .9 version. Would it be possible to add a sf_project_vrs_previous column to the sf_product_info table? That way we can check for constancy when deploying new versions.

BasVanguard

asked in Questions & Conversations

OpenID Connect - redirect and logout url

For a client we’re working on connecting them to their corporate SSO solution. Fortunatly the documentation the client provided us indicated that they support OpenID as method.In prepraring the request to enable connection to their SSO solution the client’s IT team asked us to provide the redirect url that would be used. As this is the first time using Thinkwise to connect to OpenID I’m unaware of what this URL will be and I can’t find it in the relevant documentation.Can someone provide me with this url?Let’s asume that the environment will behttps://sampleurl.nl/Indicium (for the indicium interface) https://sampleurl.nl/Universal (for the universal interface)

BasVanguard

Saving reportsCompleted

In our current project we need the ability to save a report to the database. Because of the sensitive medicale data that we are processing we need to clean our database as soon as possible. After a client has filled a questionaire we need to generate a PDF with the provided answers. We offer this PDF as download for the client and later on need to move that PDF to a document management system.We have been told that the only way currently available is to build a API endpoint that generates the report and call upon that API endpoint so we can store the generated PDF into the database. This feels like a suboptimal approach with the potentiel that we’re exposing and endpoint that has access to sensitive data.Having the ability to generate a report and store that report into the database directly would be very benificial to our processes and I can imagine helpfull for others as well.

BasVanguard

Ability to access Client IP adressCompleted

When we need to provide API access to our data we want to ensure that the connection is secure. We utilize session_id’s to achieve this.Currently, we lack the ability prevent session hijacking or session ID guessing because we can't bind session_id with other client properties, like the IP address or User-Agent.https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#binding-the-session-id-to-other-user-properties

BasVanguard

asked in Questions & Conversations

HTTP message signing

For a client we're currently scoping the development of a new integration to their system.This platform offers data exchange services between multiple parties. Their service is API based with the actual message traffic being send in XML. Because of the type of data being processed security is extremely important to all parties involved.It is therefor mandatory to sign all outgoing messages. Their documentation contains the following example on how to do this within the context op postman.openssl dgst -sha256 -sign ‘[private_key_name].key’ -out ‘[signature_name].sha256’ ‘[message_name].xml’If then asks you to base64 encode the signature_name.sha256 and message_name.xml before transmission.How would we approach this from within a Thinkwise environment?

BasVanguard

Private Certificate when using HTTP connectorOpen

For a client we need to connect to the HDN network (Hypotheker Data Network).We have been able to simulate the required communication with the network using both Postman and Insomnia but are running into some issues building this connection using Thinkwise. (Simulation available on request)The root cause of this issue is the fact that connecting to the network requires the use of a private certificate as authentication. In postman this means installing a certificate issued by HDN and the private key of that certificate. Postman will use this certificate for all calls to the provided domain. Based on this certificate an access token is provided for use with the API.When sending a message to the network (base64 encoded XML) the network also required me to attach a signature of the message to the json encoded request.body. We currently see no option for sending out http request from Thinkwise using a private certificate. We have been unable to create message signatures based on the privat

BasVanguard

asked in Questions & Conversations

How can I schedule the report mailer?

In a recent meeting a client told us about her morning routine. A quite cumbersome exercise logging into their thinkwise application to verify if there are any records with certain error states. Only to log out when none are found.We suggested it would be a lot better to send her and some other staff a daily report containing records with error states (and some other goodies to show the success of the system). We would like to send them this report each workday morning at 6:45 using the report mailer.We know how to schedule process flows within the app. But how do we get the application to send out a report (task with gui code) while triggering this from a schedules flow?

Badges

Sanne Buitelaarhas earned the badge Geek
André Heijmerikshas earned the badge Preparator
Yarahas earned the badge Geek
Robbert van Tongerenhas earned the badge Firestarter
HJ van Dalfsenhas earned the badge Transcriber

Show all badges

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login

Login to the Thinkwise Software Community

Login

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK