azure - HTTP response and headers for AJAX/oData authentication? -
azure - HTTP response and headers for AJAX/oData authentication? -
how odata or ajax services should respond when authentication cookie expired , it's time renew?
what should server send client when
an odata or ajax service access forbidden (access denied)
when session credentials stale, , need renewed, perhaps redirecting adfs, openid, or azure acs idp
just looking in wikipedia lets me guess should send version of 403.x first scenario, , 401 sec scenario.
please confirm if above correct, , should include in response header , body well.
some examples assume wrong following:
silently error out ajax service , homecoming no data attempt redirect ajax phone call idp send error text client not in json format
its safe play http status codes instead of cooking own tokens or of sort.
since fundamentals of odata create possible client knows how communicate http, makes sense play around http status code. clients decide on particular status code.
ajax azure openid odata wif
Comments
Post a Comment