Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
5.0.5
-
None
Description
Say you are writing an activate event handler, meant to guard the page against access without a provided token.
void onActivate(String token) {
// validate the token
}
Object onPassivate()
{ return _token; }Great ... but what about the case where the user omits the token?
Object onActivate() {
return _invalidAuthorizationPage; // Redirect away
}
But with the current setup, this gets invoked BEFORE onActivate(String) so there's no hope of actually using the page, even with the security token.