This week's giveaway is in the Android forum.
We're giving away four copies of Android Security Essentials Live Lessons and have Godfrey Nolan on-line!
See this thread for details.
The moose likes JForum and the fly likes JForum Integration SSO Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Products » JForum
Bookmark "JForum Integration SSO" Watch "JForum Integration SSO" New topic
Author

JForum Integration SSO

ver woo
Greenhorn

Joined: Jan 14, 2013
Posts: 6
I need some helps on JForum integration SSO. I am aware this discussion http://www.coderanch.com/t/574564/jforum/Single-Signon-automatic-login which is out updated and doesn't match the current code base. Please advise how the integration need to take place.


Mark Page
Greenhorn

Joined: Jan 16, 2013
Posts: 2
Please confirm which version of JForum you are using?
ver woo
Greenhorn

Joined: Jan 14, 2013
Posts: 6
Mark Page wrote:Please confirm which version of JForum you are using?


2.3.5-SNAPSHOT

I believe that it is the latest version.
Mark Page
Greenhorn

Joined: Jan 16, 2013
Posts: 2
OK, I'm going to be working on the latest stable version in a week or two. I was involved with the original SSO code back in the day and SSO is a requirement of the project I'm about to work on.

What is it you are having a problem with specifically, i.e. just don't know where to start or are you getting errors?
ver woo
Greenhorn

Joined: Jan 14, 2013
Posts: 6
Mark Page wrote:OK, I'm going to be working on the latest stable version in a week or two. I was involved with the original SSO code back in the day and SSO is a requirement of the project I'm about to work on.

What is it you are having a problem with specifically, i.e. just don't know where to start or are you getting errors?


Is the following integration logic correct?
  • 1. After a user signs in the application, encrypt this user’s unique identifier and save this encrypted value in a cookie.
  • 2. This cookie can be used to authenticate the user in JForum. A filter/interceptor will be created to verify the authorization for any JForum URLS with a pattern of “/forum/*”
  • 3. When a user navigates to a JForum page, the cookie value will be used to verify user’s credential against the JForum database. The cookie value will be decrypted for usage, of course.
  • 4. If it is the first time for the user using JForum (that is the user account data doesn’t exist in JForum DB), a web service call will be issued to retrieve this user’s profile data, namely screen name, email, and encrypted password, from our app. And those user data will be stored in the jforum_users table of the JForum database.
  • 5. When the user log off her/his account or a session timeout, the cookie will be removed.








  •  
     
    subject: JForum Integration SSO
     
    Similar Threads
    RemoteSSO?
    sso(my app) 1stuser login and logout 2nd user login it show Connected users:1st login userinfo
    Jforum SSO - restrict direct forum access => redirect to login page if not loged in please help!!!
    Using JForum SSO - a kludger's tale
    Cookie-based SSO and v2.1.7