Blogs

RSS
RSS
thumbnail
Álvaro Saugar López | 20 Jan 2022

NOTE: Recap made by all the organizers of /dev/24 It's been some time since /dev/24 ended and it's time to look back and analyze what /dev/24 was. The main feeling is that the second edition of /dev/24, on November 3 and 4, had the same spirit as the first one.     If you write {curly braces}, this is for you! If you only read them, it'll help you to write. On this edition, two...

6326
thumbnail
Jamie Sammons | 31 Dec 2021

​​​​​​​ Download options Liferay Portal and Liferay Commerce share the same Bundle and Docker image.  To get started using either Liferay Portal or Liferay Commerce, choose the best download option suited for your environment below. Docker image To use Liferay Portal 7.4 GA5: docker run -it -p 8080:8080 liferay/portal:7.4.3.5-ga5 For more information on using the official Liferay...

5266
thumbnail
Crystal Santos | 03 Jan 2022

When we think about Liferay, we always think about Liferay development style. Even to create React modules until 7.3 version, the React code is Liferay based because you need to have an OSGI module to achieve the final result. However, things are changing!  First, what is React? React is a declarative, efficient, and flexible JavaScript library for building user interfaces. It lets you...

7331
thumbnail
Yuxing Wu | 23 Dec 2021

Hello all, The easiest thing you can do to mitigate the recent vulnerabilities in Log4j is to set the JVM parameter -Dlog4j2.formatMsgNoLookups=true. While this solution is not perfect, it should provide sufficient protection given how Log4j is used in Liferay Portal. However, based on Log4j's newest recommendation to mitigate by removing the JndiLookup class, the Community Security Team...

5423
thumbnail
Ashley Yuan | 22 Dec 2021

The new installers and IDE 3.9.5 ga6 which support development on the upcoming Liferay 7.4 U1 has been made available. Community Download https://liferay.dev/-/ide-installation-instructions Customers Download https://customer.liferay.com/downloads/-/download/liferay-workspace-with-developer-studio-3-9-5 ...

4465
thumbnail
Fabian Bouché | 20 Dec 2021

I've often been asked whether we can process additional UserInfo data from an OpenId Connect session after successful log in. I used to share this piece of code where I had my way to access the OpenIdConnect Session object in order to retrieve the Access Token Liferay obtained in order to fetch additional info: https://github.com/fabian-bouche-liferay/oidc-userinfo-mapping/ However, last...

4161
thumbnail
Fabian Bouché | 17 Dec 2021

The Apache Log4j project is now saying that setting -Dlog4j2.formatMsgNoLookups=true is not a 100% guarantee that you are protected from exploits. I think that currently no one has found a way to exploit the vulnerability on Liferay with -Dlog4j2.formatMsgNoLookups=true set but many prefer to be extra safe. As it has been stated before, you're likely to find log4j2 in DXP...

8154
thumbnail
Fabian Bouché | 14 Dec 2021

The landscape for Identity and Access Management has changed over the years. Whereas in the past, we'd often rely on proprietary or home grown solutions, we can now largely rely on well established standards. Setting up Single Sign On has become easier as many SaaS providers offer some free plans and there is even easy-to-use software out there. In this article, I'm going to show you how you...

6213
thumbnail
David H Nebinger | 10 Dec 2021

Hey, all! There's a new zero-day vulnerability hitting the web right now, and it is affecting a lot of libraries and applications out there, including Liferay 7.4. Any app using Log4j2 is vulnerable. If you are using Log4j2 in your customizations or you are using Liferay 7.4 (which now uses Log4j2), this new vulnerability affects you. I'm not going to show anything about how to take advantage...

23249
thumbnail
David H Nebinger | 13 Jul 2022

Recently I started a new "Office Hours" session to occur every other Tuesday at 9am EST/10am EDT (14:00 UTC) and 4pm EST/5pm EDT (21:00 UTC) on a Zoom bridge. Here you can bring questions, ideas, or whatever. Heck, feel free to join and just talk about your Liferay projects if you want. I'll post the Zoom meeting bridge to the Liferay Community Slack, feel free to sign...

8227
thumbnail
Carlos Durán | 24 Nov 2021

Nuestra comunidad cumple otro año más, y llegamos a los cuatro. En estos momentos son en los que echamos la vista atrás para ver el camino que hemos recorrido y que nos anima a mirar para adelante con ilusión para continuar con este proyecto. Aunque parecía que este año íbamos a continuar como habíamos dejado el pasado 2020, lo cierto es que con lo que respecta a Liferay y la comunidad ha...

6578
Brian Lavender | 18 Nov 2021

While Liferay has many wonderful features like DRAC, a docs repository, user self registration, and more, I still would like to store my data for custom portlets/applications in an external database. It’s like, you know, data independence! I found David H Nebinger’s blog for Liferay 7, Service Builder and External Databases. I struggled with a few issues, and I updated some things over Dave’s...

7215
thumbnail
Marcial Calvo Valenzuela | 18 Nov 2021

Esta entrada de blog está también disponible en español It is increasingly common to deploy applications or microservices in a container-based infrastructure, such as Kubernetes or Openshift. Liferay Portal / DXP is not far behind in this regard and thanks to the fact that it is a totally agnostic platform to the underlying infrastructure, it is possible to implement it in this type of...

7045
Brian Lavender | 15 Nov 2021

Blade is one of the great Liferay development tools. This is true, unless it stops working! Or, maybe you ran the blade installer and the error came up and you now wonder what to do now?! Punt? Watch a spaghetti western? That’s what this blog is about, resolving issue(s) with blade, two issues that have occurred on Windows for me using blade. Blade Error Failed to find Java VM Liferay...

5570
thumbnail
Marcial Calvo Valenzuela | 18 Nov 2021

  This blog is also available in english Cada vez es más habitual el despliegue de aplicaciones o microservicios en una infraestructura basada en contenedores, como Kubernetes u Openshift. Liferay Portal/DXP no se queda atrás en este aspecto y gracias a que es una plataforma totalmente agnóstica a la infraestructura subyacente, es posible su implementación en este tipo de...

5248
thumbnail
Dave Truong | 15 Nov 2021

I had a bit of a hiccup when running my demo during /dev/24 so I ran through my presentation again.   Here is the recording as promised: https://drive.google.com/file/d/1h3WqERQr4VHphOlzUYdSAxgKcCoWCnX-/view?usp=sharing Feel free to ask questions below. Thanks, Dave

4750
Brian Lavender | 10 Nov 2021

  At the time of this writing, the Maven archetype for a JSF portlet with CDI enabled generates output that can only be built using Maven in order to enable CDI. This currently works with Liferay Portal 7.3 and not 7.4. With a few tweaks, you can make your JSF portlet use your Gradle build system. Initially, you will use Maven to generate the code and while it does put int a build.gradle,...

6455
thumbnail
David H Nebinger | 10 Nov 2021

Introduction In a recent blog I explained how to create a React-based portlet within your Liferay Gradle Workspace by using the js-widget Blade template which in turn uses the Yeoman Liferay JS Generator to create the project. (Wow, that was a mouthful ;-) ) In this way, you can have your Liferay Gradle Workspace take care of building your complete suite of Liferay modules, the...

8147
thumbnail
Jamie Sammons | 15 Nov 2021

Download options Liferay Portal and Liferay Commerce share the same Bundle and Docker image.  To get started using either Liferay Portal or Liferay Commerce, choose the best download option suited for your environment below. Docker image To use Liferay Portal 7.4 GA4 and Liferay Commerce 4.0 GA4 run the following: docker run -it -p 8080:8080 liferay/portal:7.4.3.4-ga4 For more...

10485
thumbnail
Marcial Calvo Valenzuela | 03 Nov 2021

Esta entrada de blog  está también disponible en español. One of the star features of the Kubernetes world is, without a doubt, the Horizontal Pod Autoscaling. With it, we can benefit from a superior performance capacity of our service at specific moments, where the original dimensioning of our cluster may not be sufficient, avoiding degradation or even loss of service. Kubernetes...

6512