User bio

I have a background in electrical engineering ad have been active as software engineer and architect for the past 35 years. Since 2010 I am active in healthcare interoperability, for VitalHealth and Philips. In June 2022 I joined InterSystems.

Member since Jun 22, 2022
Replies:

Hi Edmara,

Yesterday I found we are having the same issue. This issue surfaced after we upgraded to 2023.1.5 (Build 697U).

In our case the issue is caused by a different Client Redirect URL. It is set to https://host/api/v1/xxx/csp/sys/oauth2/OAuth2.Response.cls
via the Prefix /api/v1/xxx in the Client Configuration page.

We could work around the issue by patching class OAuth.Response and changing the cookie path from %request.Application to "/" in line 134, so from

Do %response.SetCookie(..#CSRFCookieName, state,,%request.Application,,%request.Secure,1,sameSite)

to

Do %response.SetCookie(..#CSRFCookieName, state,,"/",,%request.Secure,1,sameSite)

I have logged a WRC for this unexpected behavior change.

I am curious to hear from you!

Open Exchange applications:
Certifications & Credly badges:
Theo has no Certifications & Credly badges yet.
Global Masters badges:
Followers:
Following:
Theo has not followed anybody yet.