What are the security implications of that? Does that mean that any web page can run a random workflow on your iPad, or are the hex strings so long that it is as good as impossible to guess one, or (way worse) is the hex string an encoding of the steps to run?
I don't have them in front of me right now but the hex is long. I have no clue if they encode something, but I remember thinking "UUID".
The way it lets workflows create apps, is that it creates a data url, that it opens in safari, and l has you bookmark that URL to your home screen. When opened as one of those safari web apps, the javascript on the page auto clicks the only link in the page - one to a URL formated like this: workflow000000://x-callback-url/run-workflow?id=HEX, and bounces you into Workflow