Loading

Apex Steps fail to execute with Invalid Session error message when having the "Require HttpOnly attribute" session setting enabled

Date de publication: Jul 5, 2023
Description
The following article details why Apex Steps fail to execute with an Invalid Session error message in Analytics Studio when the "Require HttpOnly attribute" session setting is enabled in the org and the options available to workaround this expected behaviour. 
Résolution
Any Apex Step included in a dashboard will fail to execute with an Invalid Session error message if the same is open from the Analytics Studio app with url extension /analytics/wave/wave.apexp when the "Require HttpOnly attribute" session setting is enabled in the org. 

The Apex Step callout to the rest service utilizes the Session Id cookie via HTTPs per design, so the error we see when the mentioned setting is enabled is expected. This will be resolved by the GA of Apex Step and Wave.app in a future release (*). 

For now, these are the suggested workarounds to avoid the error:

Option 1) 
Disable the "Require HttpOnly attribute" session setting

Option 2) 
Open the Analytics Studio app. Replace the /analytics/wave/wave.apexp[...] piece in the URL with /wave/wave.app. So the resultant URL will look like this: https://your_domain_name.my.salesforce.com/wave/wave.app

The Analytics Studio app with url extension /wave/wave.app doesn’t make use of the Session Id cookie, instead it makes use of standard Lightning Authentication therefore the issue doesn’t happen here.

(*) Apex Step is currently a beta feature so it is not recommended to be used in a business critical setting.

 

Numéro d’article de la base de connaissances

000380654

 
Chargement
Salesforce Help | Article