[
https://jira.nuxeo.org/browse/NXP-4302?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Stéfane Fermigier closed NXP-4302.
----------------------------------
Resolution: Fixed
Closing as requested by submitter.
> Nuxeo - Liferay iFrame Authentication
> -------------------------------------
>
> Key: NXP-4302
> URL: https://jira.nuxeo.org/browse/NXP-4302
> Project: Nuxeo Enterprise Platform
> Issue Type: Question
> Components: Security / Rights
> Affects Versions: 5.3 GA
> Environment: Nuxeo 5.3 GA
> Reporter: Hariprashath Shivalingam
> Assignee: Thierry Delprat
> Priority: Critical
>
> We have planned to display Nuxeo web application as an iFrame in our Liferay
> Portal and it is required for us to authenticate Nuxeo automatically based on
> the user logged in into Liferay. (i.e.)we want to display the users dashboard
> screen in Nuxeo directly after authentication.
> We are using Portal Authenticator (PORTAL_AUTH) and will be validating
> against OpenSSO.
> I will be able to include the user name and ssotoken as query parameters
> dynamically but I am not sure how to retrieve the query parameters in the
> PortalAuthenticator plugin. I get NULL values returned when I pass the
> necessary values in the query parameter.
> The following is a code snippet.
> public UserIdentificationInfo handleRetrieveIdentity(HttpServletRequest
> httpRequest, HttpServletResponse httpResponse) {
> String userName = httpRequest.getParameter("liferay_user_name");
> String openSSOToken = httpRequest.getParameter("opensso_token");
> if (validateToken(userName, openSSOToken)) {
> return new UserIdentificationInfo(userName, userName);
> } else {
> return null;
> }
> }
> Note : The method validateToken will take care of validating the opensso
> token.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets