This week's book giveaways are in the Java EE and JavaScript forums.
We're giving away four copies each of The Java EE 7 Tutorial Volume 1 or Volume 2(winners choice) and jQuery UI in Action and have the authors on-line!
See this thread and this one for details.
The moose likes JForum and the fly likes JForum Integration SSO Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of The Java EE 7 Tutorial Volume 1 or Volume 2 this week in the Java EE forum
or jQuery UI in Action in the JavaScript forum!
JavaRanch » Java Forums » Products » JForum
Bookmark "JForum Integration SSO" Watch "JForum Integration SSO" New topic
Author

JForum Integration SSO

ver woo
Greenhorn

Joined: Jan 14, 2013
Posts: 6
I need some helps on JForum integration SSO. I am aware this discussion http://www.coderanch.com/t/574564/jforum/Single-Signon-automatic-login which is out updated and doesn't match the current code base. Please advise how the integration need to take place.


Mark Page
Greenhorn

Joined: Jan 16, 2013
Posts: 2
Please confirm which version of JForum you are using?
ver woo
Greenhorn

Joined: Jan 14, 2013
Posts: 6
Mark Page wrote:Please confirm which version of JForum you are using?


2.3.5-SNAPSHOT

I believe that it is the latest version.
Mark Page
Greenhorn

Joined: Jan 16, 2013
Posts: 2
OK, I'm going to be working on the latest stable version in a week or two. I was involved with the original SSO code back in the day and SSO is a requirement of the project I'm about to work on.

What is it you are having a problem with specifically, i.e. just don't know where to start or are you getting errors?
ver woo
Greenhorn

Joined: Jan 14, 2013
Posts: 6
Mark Page wrote:OK, I'm going to be working on the latest stable version in a week or two. I was involved with the original SSO code back in the day and SSO is a requirement of the project I'm about to work on.

What is it you are having a problem with specifically, i.e. just don't know where to start or are you getting errors?


Is the following integration logic correct?
  • 1. After a user signs in the application, encrypt this user’s unique identifier and save this encrypted value in a cookie.
  • 2. This cookie can be used to authenticate the user in JForum. A filter/interceptor will be created to verify the authorization for any JForum URLS with a pattern of “/forum/*”
  • 3. When a user navigates to a JForum page, the cookie value will be used to verify user’s credential against the JForum database. The cookie value will be decrypted for usage, of course.
  • 4. If it is the first time for the user using JForum (that is the user account data doesn’t exist in JForum DB), a web service call will be issued to retrieve this user’s profile data, namely screen name, email, and encrypted password, from our app. And those user data will be stored in the jforum_users table of the JForum database.
  • 5. When the user log off her/his account or a session timeout, the cookie will be removed.








  •  
    I agree. Here's the link: http://aspose.com/file-tools
     
    subject: JForum Integration SSO