[Logo] JForum - Powering Communities
  [Search] Search   [Recent Topics] Recent Topics   [Hottest Topics] Hottest Topics   [Top Downloads] Top Downloads   [Groups] Back to home page 
[Register] Register /  [Login] Login 


JForum 2.8.3 is out with various fixes and improvements. Read all about it here

JForum Integration Single Signon RSS feed
Forum Index » Integration Forum
Author Message
vTest


Joined: 2013/1/16
Messages: 14
Offline
I need some helps on JForum integration SSO. I am aware this discussion http://www.coderanch.com/t/574564/jforum/Single-Signon-automatic-login. The information is out updated and doesn't match the current code base. The following is the integration logic. Please correct me if it is not right.

  • 1. After a user signs in the application, encrypt this user’s unique identifier and save this encrypted value in a cookie.

  • 2. This cookie can be used to authenticate the user in JForum. A filter/interceptor will be created to verify the authorization for any JForum URLS with a pattern of “/forum/*”

  • 3. When a user navigates to a JForum page, the cookie value will be used to verify user’s credential against the JForum database. The cookie value will be decrypted for usage, of course.

  • 4. If it is the first time for the user using JForum (that is the user account data doesn’t exist in JForum DB), a web service call will be issued to retrieve this user’s profile data, namely screen name, email, and encrypted password, from our app. And those user data will be stored in the jforum_users table of the JForum database.

  • 5. When the user log off her/his account or a session timeout, the cookie will be removed.



  • Please advise how the integration need to take place.

    Thanks for your helps in advance.
    andowson


    Joined: 2011/6/30
    Messages: 252
    Offline
    Hi, check this post first if it help.
    http://jforum.andowson.com/posts/list/35.page
    vTest


    Joined: 2013/1/16
    Messages: 14
    Offline
    Thanks very much for the lead.

    I notice an 'Anonymous' user can post a message in a use scenario, but not in other ones. The authentication seems to be inconsistent. How to enforce only a signin user can post a message for all cases, otherwise it is read only?
    andowson


    Joined: 2011/6/30
    Messages: 252
    Offline
    If you want to deny anonymous post in JForum, just go to Admin Control Panel > Group Managment > General > Permission
    Choose all boards in the deny anonymous post section.
    • [Thumb - deny_anonymous_post_in_JForum.png]
     Filename deny_anonymous_post_in_JForum.png [Disk] Download
     Description Deny anonymous post in JForum
     Filesize 6 Kbytes
     Downloaded:  64023 time(s)

    vTest


    Joined: 2013/1/16
    Messages: 14
    Offline
    andowson wrote:If you want to deny anonymous post in JForum, just go to Admin Control Panel > Group Managment > General > Permission
    Choose all boards in the deny anonymous post section.


    Thanks very much.

    After work, I recognize that it likely is a configuration thing, but not a code problem.

    vTest


    Joined: 2013/1/16
    Messages: 14
    Offline
    I can't figure out why I get the following error in the sso.redirect configuration.

    java.net.URISyntaxException: Illegal character in authority at index 7: http://www.mycompany.com


    I don't see any bad characters there.
     
    Forum Index » Integration Forum
    Go to:   
    Mobile view
    Powered by JForum 2.8.3 © 2023 JForum Team • Maintained by Andowson Chang and Ulf Dittmer