Blogs

Liferay DXP 2026.Q3 includes a capability I have been wanting to experiment with: Liferay can now act as a Model Context Protocol server. I knew what MCP was conceptually, but I had no idea what I would actually find once I connected an AI client to Liferay and let it explore. So I did what seemed reasonable. I started a disposable local Liferay instance, enabled MCP, connected...

I have been asking for something like Design Libraries in Liferay for years. And I know I am not the only one. Imagine you have a fragment that provides a standard hero, product card, call-to-action, navigation element, or some other piece of your organization's design. You use that fragment across ten sites. Until now, those ten sites generally meant ten copies of that fragment....

Cookies are one of those web technologies that start simple and become complicated very quickly. Setting a cookie is easy. The difficult part is deciding whether you are allowed to set it, explaining what it is used for, recording the visitor's consent, preventing code from running before that consent exists, and making sure backend behavior follows the same decision. Liferay has...

Build With Liferay Liferay offers you an extensible platform for launching digital experiences: public websites, customer and partner portals, unified commerce storefronts, employee workplaces, and more. Almost every layer is composable and built to be expanded. Building on Liferay keeps getting easier. The characteristics that make Liferay flexible for developers also make it ready...

Why this article? I try to evaluate how easy vibe coding is with Liferay. I ask ChatGPT and/or Claude to generate a Liferay module from scratch with a single sentence. First, I use my mobile and the ChatGPT website with a free license. All AIs know Liferay; the important thing is to specify the version. In my case I put 2025.q1, but 2026.q1 is also possible, since it has been available for a...

Liferay's documentation does a good job of explaining how to turn ModSecurity on, how to provide your own configuration, and how to send the audit log to the Liferay Cloud Console. But, as I recently discovered while working with a client, there is a pretty big gap between: ModSecurity is enabled and I can see logs. and: I'm getting the ModSecurity information I actually...

Security scanners are very good at finding things. Run one against a Liferay DXP installation and it will inventory third-party libraries, determine their versions, compare those versions against vulnerability databases such as the NVD, and produce a list of CVEs. Then somebody opens a Liferay Support ticket. We're running version X of library Y. CVE-Z says that version is...

If you've searched for information about OpenID Connect (OIDC) Single Logout (SLO) in Liferay, you've probably come across answers stating that it isn't supported. That answer was accurate for a long time, and it still occasionally appears in support discussions today. Beginning with Liferay DXP 2026.Q1, however, that answer is no longer correct. Liferay now supports the OpenID...

Why This Matters When you update Blade CLI and create a new Liferay Workspace, the generated workspace normally uses the latest Liferay Workspace Gradle plugin. That plugin selects versions for a number of supporting build tools, including the Service Builder plugin. For new projects targeting the latest Liferay release, this is usually what you want. The detail worth paying...

Liferay’s official Tomcat installation guide is a useful starting point, but it is not quite enough for installing Liferay DXP 2026.Q1 on Red Hat JBoss Web Server 6.2.3. The reason is straightforward: JBoss Web Server is Tomcat, but it is Red Hat’s supported Tomcat distribution, and the current Liferay documentation contains a few assumptions that do not line up cleanly with a modern...

I've recently been working on a project to create a Chatbot using AI Hub. Although the documentation at https://learn.liferay.com/w/ai-hub/integrating-ai-hub-with-liferay-dxp is very helpful at completing this task, there are some things that it leaves out. I thought these might be helpful to others, so I thought I'd share them here. 1. The building blocks (quick orientation) When...

A Problem Every Liferay Developer Has Faced If you have worked on a Liferay DXP project with more than a few custom modules, this scene will feel familiar. You deploy all your modules together. Most of them start up without any trouble. But a few fail, and when you open the logs, you find a bundle that stopped right after it started. The reason is almost always the same. One...

Introduction One of the biggest strengths of Liferay DXP is its Headless API ecosystem. Whether we're working with Custom Objects, Web Content, Documents, Commerce, or custom REST Builder APIs, Liferay provides well-designed REST endpoints that are easy to integrate with modern frontend applications. For simple data retrieval, the existing APIs work extremely well. For example: ...

A Simple Question A customer recently reached out after experiencing a six-hour outage of their mail server. The outage had nothing to do with Liferay. The platform was healthy. Their application was healthy. Business processes continued to run normally. The problem was that some of those business processes generated emails. Not marketing emails. Not newsletters. ...

Many organizations use centralized logging platforms such as Splunk to aggregate logs from applications, infrastructure, containers, and cloud services. Centralized logging makes it easier to troubleshoot issues, identify trends, create alerts, and correlate events across multiple systems. A common question I hear is: How do I configure Liferay DXP to send logs directly to Splunk? ...

If you have ever run a Liferay database upgrade, you know how unforgiving the setup used to be. One wrong path in a properties file, or a database your edition doesn't even support, and you could be several minutes into a run before a cryptic error appeared, usually with no hint about what actually went wrong. We went back through the most common support cases and customer frustrations, and...

When I started working through the new DXP Free Tier onboarding flow for an upcoming blog post, I stumbled across something that initially looked wrong. After generating my free activation key, I downloaded the activation key file named: activation-key-dxp-production-2026.q2-.xml  At the time, 2026.Q2 had not even been released yet. Naturally, that raised some questions. ...

I had a simple idea. As a Manufacturer, Company manages a network of distributors across the world different regions, different tiers, different sales numbers. Anyone on the team wanting to know "who's our top performer in Asia Pacific?" or "which distributors missed their quota last year?" had to dig through spreadsheets or ask someone who knew. I thought: what if...

For the last couple of years, most AI conversations around enterprise platforms have focused on content generation, chatbots, summaries, and assistants. Useful? Absolutely. But those use cases still largely leave the actual construction of digital experiences in human hands. That’s starting to change. I recently got an early look at a new capability being developed around...

The Challenge: The "Human Bottleneck" In any thriving digital community, content moderation is a double-edged sword. You want vibrant discussions, but you also need to protect users from spam, toxicity, and "bad vibes." Traditionally, this meant a human moderator had to manually review every single comment a process that is slow, expensive, and frankly, exhausting. ...