Blogs

RSS
RSS
thumbnail

The Liferay Portal 7.4 GA7 release is primarily focused on fixes so no new notable features will be introduced with this release. This release also includes Log4j 2.17.1 to address CVE-2021-44832 Download options Liferay Portal and Liferay Commerce share the same Bundle and Docker image.  To get started using either Liferay Portal or Liferay Commerce, choose the best download option...

1033

For the second year in a row, this event will be global and fully virtual with live moderation from our studios in Germany. We are excited to invite you to another truly international event, full of inspiring keynotes, workshops, and deep dives. Registration will open soon, so mark your calendars – and stay tuned!   CALL FOR PAPERS!   Contribute to DEVCON by presenting your knowledge to...

862
thumbnail

Introduction So recently I completed a database upgrade from Liferay EE 6.1 up to Liferay DXP 7.4. It was actually pretty straightforward and I didn't encounter any significant blockers. I did however learn some stuff along the way and I thought I'd share those details here so you will be able to do your next Liferay DB upgrade in the same way. Note that although I'm specifically including...

929
thumbnail

Introduction So I wrote https://liferay.dev/blogs/-/blogs/extending-liferay-osgi-modules five years ago targeting Liferay 7.0. A lot has changed since then. Liferay Gradle Workspace plugin has seen numerous updates. Gradle has seen an update or two as well. Recently when asked to assist a client who wanted to extend Liferay's Journal Article service, I started by recommending they look...

619
thumbnail

The Liferay Portal 7.4 GA6 release is primarily focused on fixes so no new notable features will be introduced with this release. Download options Liferay Portal and Liferay Commerce share the same Bundle and Docker image.  To get started using either Liferay Portal or Liferay Commerce, choose the best download option suited for your environment below. Docker image To use Liferay...

1379
thumbnail

The following versions of PortletMVC4Spring were released on January 5, 2022 AD: Version Description   5.3.1 For use with Spring Framework 5.3.x (tested with 5.3.12) Release Notes 5.2.2 For use with Spring Framework 5.2.x (tested with 5.2.18.RELEASE) Release Notes 5.1.3 For use with Spring Framework 5.1.x (tested with 5.1.20.RELEASE)...

1038
thumbnail

Introduction Liferay DXP is a flexible platform which has been developed initially to support developers to easily implement business automation needs. We always face the question “what if i have a custom business requirements, how easy can we implement that if we adapt Liferay?”, in this blog we will discover the ease of customizing Liferay to implement business needs smoothly. Prerequisites...

812
thumbnail

Introduction Liferay DXP has traditionally offered a wide variety of extension mechanisms to extend and customize the platform. Most of these mechanisms require the deployment of custom-written code to be activated. As we move towards SaaS solutions and Cloud offerings, we need to provide other extension mechanisms that don't require customers to deliver and run arbitrary code on the company...

651
thumbnail

​​​​​​​ Download options Liferay Portal and Liferay Commerce share the same Bundle and Docker image.  To get started using either Liferay Portal or Liferay Commerce, choose the best download option suited for your environment below. Docker image To use Liferay Portal 7.4 GA5: docker run -it -p 8080:8080 liferay/portal:7.4.3.5-ga5 For more information on using the official Liferay...

1571
thumbnail

When we think about Liferay, we always think about Liferay development style. Even to create React modules until 7.3 version, the React code is Liferay based because you need to have an OSGI module to achieve the final result. However, things are changing!  First, what is React? React is a declarative, efficient, and flexible JavaScript library for building user interfaces. It lets you...

1371
thumbnail

Hello all, The easiest thing you can do to mitigate the recent vulnerabilities in Log4j is to set the JVM parameter -Dlog4j2.formatMsgNoLookups=true. While this solution is not perfect, it should provide sufficient protection given how Log4j is used in Liferay Portal. However, based on Log4j's newest recommendation to mitigate by removing the JndiLookup class, the Community Security Team...

2009
thumbnail

The new installers and IDE 3.9.5 ga6 which support development on the upcoming Liferay 7.4 U1 has been made available. Community Download https://liferay.dev/-/ide-installation-instructions Customers Download https://customer.liferay.com/downloads/-/download/liferay-workspace-with-developer-studio-3-9-5 ...

1378
thumbnail

I've often been asked whether we can process additional UserInfo data from an OpenId Connect session after successful log in. I used to share this piece of code where I had my way to access the OpenIdConnect Session object in order to retrieve the Access Token Liferay obtained in order to fetch additional info: https://github.com/fabian-bouche-liferay/oidc-userinfo-mapping/ However, last...

1248
thumbnail

The Apache Log4j project is now saying that setting -Dlog4j2.formatMsgNoLookups=true is not a 100% guarantee that you are protected from exploits. I think that currently no one has found a way to exploit the vulnerability on Liferay with -Dlog4j2.formatMsgNoLookups=true set but many prefer to be extra safe. As it has been stated before, you're likely to find log4j2 in DXP...

3581
thumbnail

The landscape for Identity and Access Management has changed over the years. Whereas in the past, we'd often rely on proprietary or home grown solutions, we can now largely rely on well established standards. Setting up Single Sign On has become easier as many SaaS providers offer some free plans and there is even easy-to-use software out there. In this article, I'm going to show you how you...

2117
thumbnail

Hey, all! There's a new zero-day vulnerability hitting the web right now, and it is affecting a lot of libraries and applications out there, including Liferay 7.4. Any app using Log4j2 is vulnerable. If you are using Log4j2 in your customizations or you are using Liferay 7.4 (which now uses Log4j2), this new vulnerability affects you. I'm not going to show anything about how to take advantage...

14122
thumbnail

Recently I started a new "Office Hours" session to occur every other Tuesday at 9am EST (14:00 UTC) and 4pm EST (21:00 UTC) on a Zoom bridge. The next meetings will occur on Tuesday, 12/7/2021 (or 7/12/2021 for my friends in the EU). Here you can bring questions, ideas, or whatever. Heck, feel free to join and just talk about your Liferay projects if you want. I'll post the Zoom meeting...

3602
thumbnail

Nuestra comunidad cumple otro año más, y llegamos a los cuatro. En estos momentos son en los que echamos la vista atrás para ver el camino que hemos recorrido y que nos anima a mirar para adelante con ilusión para continuar con este proyecto. Aunque parecía que este año íbamos a continuar como habíamos dejado el pasado 2020, lo cierto es que con lo que respecta a Liferay y la comunidad ha...

3576

While Liferay has many wonderful features like DRAC, a docs repository, user self registration, and more, I still would like to store my data for custom portlets/applications in an external database. It’s like, you know, data independence! I found David H Nebinger’s blog for Liferay 7, Service Builder and External Databases. I struggled with a few issues, and I updated some things over Dave’s...

3396
thumbnail

Esta entrada de blog está también disponible en español It is increasingly common to deploy applications or microservices in a container-based infrastructure, such as Kubernetes or Openshift. Liferay Portal / DXP is not far behind in this regard and thanks to the fact that it is a totally agnostic platform to the underlying infrastructure, it is possible to implement it in this type of...

2858