The docs describe it as 'The URL being used by the current request'

I assume this means the container specific URL in use for a given security
token, right?

For example if I display an app on http://example.com/app1/canvas then I
should store this URL in the activeUrl field in the security token.  This is
then used by the oauth proxy to construct a callback to the the callback,
right?

I'm also a little concerned that this is going to greatly increase the size
of the security token and it means that security tokens cannot be reused
from one page to the next.

I suppose one could embed the view into the security token instead of the
full URL.  Then one could construct the activeUrl based on the app Id/Url in
a way that's similar to the way requestNavigateTo() is done...

On Wed, Sep 23, 2009 at 11:57 AM, Brian Eaton <[email protected]> wrote:

> On Wed, Sep 23, 2009 at 11:19 AM, Paul Lindner <[email protected]>
> wrote:
> > I was wondering if someone could contribute some documentation for the
> > activeUrl field used in the security token.  It appears that this is used
> to
> > allow for proxied callbacks with the OAuth proxy, but I'm still a little
> > unsure.  Any help appreciated.
>
> It's the URL of the request being processed, and that is indeed it's
> purpose.  I kind of expected other people to find a use for it,
> though.
>
> There is java doc in the SecurityToken interface, I assume you want
> additional details beyond that...?
>
> Cheers,
> Brian
>

Reply via email to