Please enable JavaScript.

Coggle requires JavaScript to display documents.

ET0019 (Feature 1 : System user single sign on between old operational…

- - - - From new Portal:
        Javascript post unencoded form => old portal webserver:
        
        Collect CSRF token of old portal.
        
        On new portal, post form data to old login endpoint.
      - From iFrame: Inject javascript to login
  - - - POC:
        Auto login old portal (refer to function in 1.1, 1.3) => Refer to hide menu, header bar function
    - - User only work with old features => No interact with new features => New Portal will timed out
    - - User use old feature but let screen idle for a long time => Both portal timeout
- - - - POC: from new portal use JS to post logout
      - POC: inject JS in to iFrame and post logout