Liferay with Facebook SSO

[Tonu Sri, modificado hace 11 años.]

Hi,

I have configured Liferay with Facebook for SSO. I am able to login in Liferay successfully with Facebook credentials.

But I am facing issue while logging out from Liferay. When i logout from Liferay, still my facebook session is existing so next time Liferay authenticate on only clicking on Sign In link.

I can understand that Liferay class ( FaceBookAutoLogin.java) reads session and allow you to login. But its not secure, lets if someone login in Liferay, In second tab he will be automatically login in liferay.

Can we stop this funcationality?

Thanks:
Tonu

[Corné Aussems, modificado hace 11 años.]

Hi Tonu,

Good question!
What you could do is write up your own logout.events.post action.
Removing the session attributes that have been set in FaceBookConnectAction

	
        public static final String FACEBOOK_ACCESS_TOKEN = "FACEBOOK_ACCESS_TOKEN";

	public static final String FACEBOOK_USER_EMAIL_ADDRESS = "FACEBOOK_USER_EMAIL_ADDRESS";

	public static final String FACEBOOK_USER_ID = "FACEBOOK_USER_ID";

[Tonu Sri, modificado hace 11 años.]

Hi Corné,

Thanks for your reply.

Can you please elaborate about steps.
I cannot modify FaceBookConnectAction without EXT Plugin.

then how will it work??

Thanks:
Tonu

[Corné Aussems, modificado hace 11 años.]

You need to create a properties hook;

Add your own logout action, see for an example the DefaultLogoutPageAction register this on the property logout.events.post

Within YourLogoutPageAction remove the session attributes