Well, I issued a bug and it's being processed at the moment. Since the fix is probably gonna be applied to next release, here is a quick n' dirty solution using a hook:
In liferay-hook.xml you must at least have (in the sense that you might override more than that):
In portal.properties located under src folder you must add the following entry (put a class name of your choice):
and finally the class implementation:
Note that I'm not an http expert nor am I sure If I have taken into account all possible urls through which openid and remember me can be requested. If someone knows any other combinations, please list them here
PS. Yes, it IS Saturday here as well
In liferay-hook.xml you must at least have (in the sense that you might override more than that):
<hook>
<portal-properties>portal.properties</portal-properties>
</hook>In portal.properties located under src folder you must add the following entry (put a class name of your choice):
servlet.service.events.pre=gr.com.outsourcing.signature.liferay.LoginAccessPreActionand finally the class implementation:
public class LoginAccessPreAction extends Action
{
@Override
public void run(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws ActionException
{
try
{
String [] values = httpServletRequest.getParameterValues("_58_struts_action");
if(values != null && values.length > 0)
{
for(int vi = 0; vi < values.length; vi += 1)
{
if(values[vi].contains("open_id") || values[vi].contains("captcha") || values[vi].contains("forgot_password"))
{
throw new PrincipalException();
//System.out.println(values[vi] + " value of _58_struts_action parameter detected");
}
}
}
values = httpServletRequest.getParameterValues("currentURL");
if(values != null && values.length > 0)
{
URI currURI = new URI(values[0]);
System.out.println("\nquery of currentURL:\n"+currURI.getQuery());
String queryString = currURI.getQuery();
String [] param = queryString.split("[=]");
for(int pi = 0; pi < param.length; pi += 1)
{
String [] pair = param[pi].split("[&]");
if(pair[0].contains("struts_action"))
{
if(pair[1].contains("open_id") || pair[1].contains("captcha") || pair[1].contains("forgot_password"))
{
throw new PrincipalException();
}
}
}
}
}
catch(Exception e)
{
throw new ActionException(e);
}
}
}
Note that I'm not an http expert nor am I sure If I have taken into account all possible urls through which openid and remember me can be requested. If someone knows any other combinations, please list them here
PS. Yes, it IS Saturday here as well
