會員註冊 / 登入  |  電腦版  |  Jump to bottom of page

Integration Forum » JForum Integration Single Signon

發表人: vTest
10 年 前
I need some helps on JForum integration SSO. I am aware this discussion http://www.coderanch.com/t/574564/jforum/Single-Signon-automatic-login. The information is out updated and doesn't match the current code base. The following is the integration logic. Please correct me if it is not right.

  • 1. After a user signs in the application, encrypt this user’s unique identifier and save this encrypted value in a cookie.

  • 2. This cookie can be used to authenticate the user in JForum. A filter/interceptor will be created to verify the authorization for any JForum URLS with a pattern of “/forum/*”

  • 3. When a user navigates to a JForum page, the cookie value will be used to verify user’s credential against the JForum database. The cookie value will be decrypted for usage, of course.

  • 4. If it is the first time for the user using JForum (that is the user account data doesn’t exist in JForum DB), a web service call will be issued to retrieve this user’s profile data, namely screen name, email, and encrypted password, from our app. And those user data will be stored in the jforum_users table of the JForum database.

  • 5. When the user log off her/his account or a session timeout, the cookie will be removed.



  • Please advise how the integration need to take place.

    Thanks for your helps in advance.

    發表人: andowson
    10 年 前
    Hi, check this post first if it help.
    http://jforum.andowson.com/posts/list/35.page

    發表人: vTest
    10 年 前
    Thanks very much for the lead.

    I notice an 'Anonymous' user can post a message in a use scenario, but not in other ones. The authentication seems to be inconsistent. How to enforce only a signin user can post a message for all cases, otherwise it is read only?

    發表人: andowson
    10 年 前
    If you want to deny anonymous post in JForum, just go to Admin Control Panel > Group Managment > General > Permission
    Choose all boards in the deny anonymous post section.

    [Thumb - deny_anonymous_post_in_JForum.png]
    檔案名稱 deny_anonymous_post_in_JForum.png
    描述 Deny anonymous post in JForum
    檔案大小 6 Kbytes
    下載次數 37921 次
    [Disk] 下載


    發表人: vTest
    10 年 前
     
    andowson wrote:If you want to deny anonymous post in JForum, just go to Admin Control Panel > Group Managment > General > Permission
    Choose all boards in the deny anonymous post section.


    Thanks very much.

    After work, I recognize that it likely is a configuration thing, but not a code problem.


    發表人: vTest
    10 年 前
    I can't figure out why I get the following error in the sso.redirect configuration.

    java.net.URISyntaxException: Illegal character in authority at index 7: http://www.mycompany.com


    I don't see any bad characters there.




    會員註冊 / 登入  |  電腦版  |  Jump to top of page