Mobilefirst 8 通过获取资源/手动触发来延长登录超时 [英] Mobilefirst 8 extend login timeout by acquiring resource / manual trigger

问题描述

平台:离子 3

目标:
对于受保护的资源，可以通过超时安全检查来保护范围.
除了在空闲 1 分钟时踢出用户外，在每次适配器调用后刷新登录会话(访问令牌?).
如果更好，可以通过调用刷新登录会话.

Objective:
For protected resources, there's a scope to protected with security checking with timeout.
Beside kicking out user when idling like 1 min, refresh login session(access token?) after each adapter call.
If better, can refresh login session with a call.

发现:
尝试 obtainAccessToken 并将其插入 WLResourceRequest.
对我来说，它只是使用 Remember Me Duration 而不是 Success State Expiration.
但是在Remember Me Duration之后，它仍然注销而不更新登录会话.

Finding:
Tried obtainAccessToken and insert that in WLResourceRequest.
To me, it just uses Remember Me Duration instead of Success State Expiration.
But after Remember Me Duration, it still logout without updating login session.

这是 Mobilefirst 8.0 会话超时实现的副本 因为没有最终解决方案.

This is a duplicate of Mobilefirst 8.0 Session timeout implementation as there is no final solution.

感谢您的帮助

推荐答案

IBM MobileFirst 发布了一种特殊类型的令牌，称为刷新令牌，可用于在访问令牌过期时获取新的访问令牌.刷新令牌是长寿命的与访问令牌相比，令牌的有效期更长.

IBM MobileFirst released special type of token called Refresh token which can be used to obtain a new access token when the access token expires.The refresh tokens are long-lived tokens and remain valid for a longer duration of time compared to access tokens.

启用刷新令牌功能:

可以分别在客户端和服务器端使用以下属性启用刷新令牌功能.

Refresh token feature can be enabled using the following properties on client side and server side respectively.

客户端属性文件名:mfpclient.properties属性名称:wlEnableRefreshToken属性值:true例如，wlEnableRefreshToken=true

服务器端属性文件名:server.xml属性名称:mfp.security.refreshtoken.enabled.apps属性值:应用程序包 id 以‘;’分隔

server-side property File name: server.xml Property name: mfp.security.refreshtoken.enabled.apps Property value: application bundle id separated by ‘;’

例如，

        <jndiEntry jndiName="mfp/mfp.security.refreshtoken.enabled.apps" value='"com.sample.android.myapp1;com.sample.android.myapp2"'/>

为不同的平台使用不同的包 ID.

Use different bundle ids for different platforms.

有关更多详细信息，请参阅:刷新令牌

For more details, refer:Refresh token

注意:此功能可从 8.0.0.0-MFPF-IF201711230641-CDUpdate-01 并且仅在 Android 中，很快这个功能也将在 iOS 上可用.

NOTE: This feature available from from 8.0.0.0-MFPF-IF201711230641-CDUpdate-01 and only in Android ,soon this feature will be available for iOS as well.

这篇关于Mobilefirst 8 通过获取资源/手动触发来延长登录超时的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！