Virtual Proxy Token details

[Stephanus]

Good day Community
Could you please assist with info in regards to setting up dashboards using a virtual proxy and how the token does the handshake using ticket authentication. 
i have reviewed https://help.qlik.com/en-US/sense-admin/November2023/Subsystems/DeployAdministerQSE/Content/Sense_De... 
and 
https://help.qlik.com/en-US/sense-developer/May2023/Subsystems/ProxyServiceAPI/Content/Sense_ProxySe...
 
and doesn`t explain on how the token works and when it expires. 
Is anyone able to assist with this question to understand the process of Authenthication? 

[Levi_Turner]

Example code: https://github.com/levi-turner/QlikSenseScripts/blob/master/qs-generic/qs-qps-ticket_request-auto.ps...

- The flow is that the ticketing code makes a request to the Virtual Proxy. 

- QPS responds with a ticket

- The user needs to claim the ticket via a URL parameter

- The ticket is valid for 1 minute

[Anil_Babu_Samineni]

@Stephanus Addition to @Levi_Turner 

If Virtual proxy used the way in the backend server (Meaning, the token is sent to backend server and the same used in your webserver can be route to the destination which is users profile). 

[Marco-Silva]

Thank you for your response above @Levi_Turner and @Anil_Babu_Samineni, for the informative responses.

I do have a further question to @Stephanus question regarding the caching of tickets with a one-minute validity. Can you clarify if these tickets reside on the server or within the user's session? Your guidance on this matter would be greatly appreciated.

To provide context for our inquiry, Stephanus and I are troubleshooting an issue with our setup. We have a virtual proxy connecting our application and Qlik, allowing direct dashboard access for customer users, a configuration that works flawlessly across all our other environments. However, one of our customers is sporadically encountering an error 400 when attempting to access a dashboard. Despite efforts to resolve the issue by clearing the cache or using incognito mode, which sometimes works, the problem persists randomly.

This issue also appears to be mainly occurring for them on Chrome and not Edge.

What possible causes might there be for this inconsistency, and do you have any advice or potential solutions to suggest?

[Anil_Babu_Samineni]

@Marco-Silva Can customer share his/her browser HAR file to check what has happened?

How to collect? Save network web traffic (HAR/XML file) and consol... - Qlik Community - 1714049

[Stephanus]

Hi @Anil_Babu_Samineni 

Thanks for the assistance. Had to replicate it as we had only successful HAR files without an error but please find attached of the Har file which has the issue populated

[Anil_Babu_Samineni]

@Stephanus I can see this.

There are 2 steps

#1, Try to clear cache and try again?

#2, Can you please check with your authentication team from this virtual proxy "iso.astronenergyqa" how the cache mechanism used and is the same settings / control used across all applications (ex, saazu-ae-qsdv01.isometrix.net)?

[Stephanus]

Hi @Anil_Babu_Samineni 

Thanks for your response. Here are my responses below 

#1, Try to clear cache and try again? - We have tried multiple times. On the client environment this doesn`t always help when clearing the cache as it still shows the same erro

#2, Can you please check with your authentication team from this virtual proxy "iso.astronenergyqa" how the cache mechanism used and is the same settings / control used across all applications (ex, saazu-ae-qsdv01.isometrix.net)? --I will have to ask our Qlik developers if they are able to assist with this question.

[Anil_Babu_Samineni]

@Stephanus Did you got some input from Backend team on #2?