5 ms·

I see that the app lets workflows create their own apps on the home screen. I wonder if this had something to do with it? My thought is that it's a web app with

I see that the app lets workflows create their own apps on the home screen. I wonder if this had something to do with it? My thought is that it's a web app with a scheme to open a specific workflow. I bet Apple didn't like that.

j_b_f 12y ago
The preview video (linked elsewhere) shows the ability to add an Extension to run a specific workflow using iOS Profiles. I'm pretty sure that functionality isn't present in the released version.
- christiangenco 12y ago
  Ahh man, that would make the launch from home screen so much nicer. Bookmarking a data url is clever, but adds a good second to launch time.
  - AriX 12y ago
    The old (profile-based) version had the same restriction, actually! The data URL is the best solution we came up with.
    - christiangenco 12y ago
      Can you not create a home screen link directly to the app? <10 minutes of playing around with the workflowFEC418 url scheme> Well darn, it looks like you can't. That's crummy. I thought I could get clever with `history.pushState`, but that doesn't let you change the URL scheme without a security error. It looks like this is the best way to do it on iOS.
nmcfarl 12y ago
For informational purposes: The way it lets workflows create apps, is that it creates a data url, that it opens in safari, and l has you bookmark that URL to your home screen. When opened as one of those safari web apps, the javascript on the page auto clicks the only link in the page - one to a URL formated like this: workflow000000://x-callback-url/run-workflow?id=HEX, and bounces you into Workflow
- Someone 12y ago
  What are the security implications of that? Does that mean that any web page can run a random workflow on your iPad, or are the hex strings so long that it is as good as impossible to guess one, or (way worse) is the hex string an encoding of the steps to run?
  - nmcfarl 12y ago
    I don't have them in front of me right now but the hex is long. I have no clue if they encode something, but I remember thinking "UUID".
    - conradev 12y ago
      The hex in the scheme is one of a list of preconfigured colors for the purpose of theming the launch image. The hex in "id" is indeed a UUID. There is also a "name" parameter.

j_b_f 12y ago

The preview video (linked elsewhere) shows the ability to add an Extension to run a specific workflow using iOS Profiles. I'm pretty sure that functionality isn't present in the released version.

christiangenco 12y ago
Ahh man, that would make the launch from home screen so much nicer. Bookmarking a data url is clever, but adds a good second to launch time.
- AriX 12y ago
  The old (profile-based) version had the same restriction, actually! The data URL is the best solution we came up with.
  - christiangenco 12y ago
    Can you not create a home screen link directly to the app? <10 minutes of playing around with the workflowFEC418 url scheme> Well darn, it looks like you can't. That's crummy. I thought I could get clever with `history.pushState`, but that doesn't let you change the URL scheme without a security error. It looks like this is the best way to do it on iOS.

nmcfarl 12y ago

For informational purposes: The way it lets workflows create apps, is that it creates a data url, that it opens in safari, and l has you bookmark that URL to your home screen. When opened as one of those safari web apps, the javascript on the page auto clicks the only link in the page - one to a URL formated like this: workflow000000://x-callback-url/run-workflow?id=HEX, and bounces you into Workflow

Someone 12y ago
What are the security implications of that? Does that mean that any web page can run a random workflow on your iPad, or are the hex strings so long that it is as good as impossible to guess one, or (way worse) is the hex string an encoding of the steps to run?
- nmcfarl 12y ago
  I don't have them in front of me right now but the hex is long. I have no clue if they encode something, but I remember thinking "UUID".
  - conradev 12y ago
    The hex in the scheme is one of a list of preconfigured colors for the purpose of theming the launch image. The hex in "id" is indeed a UUID. There is also a "name" parameter.