thumbnail

Similar to my previous blog post about how to integrate the german Servicekonto with Liferay a customer wanted to create an integration of Verimi with Liferay. Several companies in germany already offer customers to login with a Verimi account. By this people can create one account which can be used to login to different portals. Verimi uses an OpenID connect mechanism, so...

thumbnail

Introduction There is a security problem around that affects several Liferay version from 6.1.x to 7.2.0. Usually Liferay only provides fixes for the latest Community Edition. This time the issues CVE-2020-7961 is rather critical, so Liferay decided to offer source code patches even for pretty old versions too. Thank you guys! We already see attacks to our Liferay servers as...

thumbnail

A customer wanted to integrate the german Servicekonto with Liferay. The Servicekonto is an authentication service used by (or at least planned to be used) by several german federal states. It offers an authentication mechanism for citizens and organizations. Every citizen can create an account using the new german identity card. As the Servicekonto offers to authenticate via OpenID...

thumbnail

How can you access custom classes within a JSP hook? Simple answer: you can't. Period. JSPs in a hook are running in the portal classloader, while your custom classes are running in the hook context classloader. So the JSP in the portal classloader does not know about your custom classes. In 2013 Kan Zhang wrote a blog post about how to use custom classes in a JSP hook....

thumbnail

Extending Liferay core functionality is rather easy. You can use hook or (if needed) ext plugins to extend the functionality. But what if you want to extend a custom plugin (e.g. one you downloaded from the Liferay Marketplace)? Of course you could download the sources of that plugin and extend it to your needs. But this way you cannot separate your extensions from the original...