Re:Workflow for iOS
by blub on Thursday December 11, 2014 @08:40AM
(#8734623)
Apple delayed this app for almost two months, wonder what the developer had to remove to be accepted.
[ Parent
| on HN ]
I see that the app lets workflows create their own apps on the home screen. I wonder if this had something to do with it? My thought is that it's a web app with a scheme to open a specific workflow. I bet Apple didn't like that.
For informational purposes:
The way it lets workflows create apps, is that it creates a data url, that it opens in safari, and l has you bookmark that URL to your home screen. When opened as one of those safari web apps, the javascript on the page auto clicks the only link in the page - one to a URL formated like this: workflow000000://x-callback-url/run-workflow?id=HEX, and bounces you into Workflow
What are the security implications of that? Does that mean that any web page can run a random workflow on your iPad, or are the hex strings so long that it is as good as impossible to guess one, or (way worse) is the hex string an encoding of the steps to run?
I don't have them in front of me right now but the hex is long. I have no clue if they encode something, but I remember thinking "UUID".
The hex in the scheme is one of a list of preconfigured colors for the purpose of theming the launch image. The hex in "id" is indeed a UUID. There is also a "name" parameter.
The preview video (linked elsewhere) shows the ability to add an Extension to run a specific workflow using iOS Profiles. I'm pretty sure that functionality isn't present in the released version.
Re:Workflow for iOS
by christiangenco on Thursday December 11, 2014 @12:17PM
(#8735888)
Ahh man, that would make the launch from home screen so much nicer. Bookmarking a data url is clever, but adds a good second to launch time.
The old (profile-based) version had the same restriction, actually! The data URL is the best solution we came up with.
Re:Workflow for iOS
by christiangenco on Thursday December 11, 2014 @12:52PM
(#8736086)
Can you not create a home screen link directly to the app?
<10 minutes of playing around with the workflowFEC418 url scheme>
Well darn, it looks like you can't. That's crummy. I thought I could get clever with `history.pushState`, but that doesn't let you change the URL scheme without a security error. It looks like this is the best way to do it on iOS.
For all intents and purposes, we removed one thing: the Today View widget.