Citrix workspace: ActionController::InvalidAuthenticityToken in Devise::SessionsController#create

[Monty Lennie]

I'm using a `ruby on rails 5` app inside of a `Cerner powerchart application` that itself is being launched from within a `citrix workspace` and I'm getting the following error when attempting to log in

`ActionController::InvalidAuthenticityToken in Devise::SessionsController#create`

If I add `skip_before_action :verify_authenticity_token` to `applicationController.rb` then it signs in correctly but when it performs the after sign in redirect, there is no longer a `current_user` stored in the next controller action and then throws a `not authenticated` error since there is no longer a `current_user` set.

[Benjamin Eichhorn (Cerner)]

Hi Monty,

You may want to try debugging and investigate how Rails is handling Authenticity Tokens. It's possible it uses sessionStorage which we don't recommend (please see the HTML5 Session Storage on https://fhir.cerner.com/smart/). We won't be able to provide much assistance outside of this in terms of debugging your application. If you are having other issues around SMART on FHIR please feel free to reach out again.

Thanks,

Ben (Cerner)

[Monty Lennie]

Thank you for your response. Ruby on Rails 5 currently uses a cookie to store the session. Are you aware if there is currently an issue with storing info in cookies from within powerchart? Also are you aware of what technology powerchart uses to show the application. If it's another browser perhaps I can try to debug on that broswer and version. Thank you

[Monty Lennie]

Also is it possible to see storage contents like we can in chrome devtools? For instance ...

I've installed the f-twelve library and it's great for showing javascript console but I cannot see network or storage information. Is there another library to view network and sotrage information in powerchart?

[Benjamin Eichhorn (Cerner)]

Hi Monty, 

Please see our documentation on Browser Requirements here[1]. I, unfortunately, do not know of any other library that would show network or storage information.

[1] https://fhir.cerner.com/smart/#browser-requirement

Thanks,

Ben (Cerner)

[Monty Lennie]

Thank you Ben. Also: Ruby on Rails 5 currently uses a cookie to store the session. Are you aware if there is currently an issue with storing info in cookies from within powerchart? Also are you aware of what technology powerchart uses to show the application. Does it use IE 10? If it's another browser perhaps I can try to debug on that broswer and version. Thank you