Doug Lee

Greenhorn
+ Follow
since Jul 31, 2012
Doug likes ...
Google Web Toolkit IntelliJ IDE Chrome
Merit badge: grant badges
For More
Cows and Likes
Cows
Total received
0
In last 30 days
0
Total given
0
Likes
Total received
0
Received in last 30 days
0
Total given
0
Given in last 30 days
0
Forums and Threads
Scavenger Hunt
expand Ranch Hand Scavenger Hunt
expand Greenhorn Scavenger Hunt

Recent posts by Doug Lee

Hi,

I've been struggling with integrating JForum into my webapp in the context of SSO.

I understand the different SSO implementations listed in the codebase and in this wiki (e.g.https://coderanch.com/t/577843/jforum/RemoteSSO#2628860). However, I'm still left with a couple of open questions:

1 - The two attributes configured by sso.email.attribute and sso.password.attribute in systemGlobals (which are used by JForum to update the user info if the user doesn't exist)
i. why does JForum need to store the password of a user that's being managed outside of JForum (SSO)
ii. does it have any effect on the functionality if I decide to use 'default user email' == sso@user string instead of supplying the email as a session attribute
iii. does it have any effect on the functionality if I decide to use 'default password' == sso string instead of supplying the password as a session attribute

2 - Using SSO to set group permissions to users
i. I saw a couple of implementations which assign the groups to the newly created user in the 'authenticate' method, is that the best practice to do that ? what if the user has changed group in the original application while already signed in to JForum, I guess that for this to work I need also to check group assignment in 'isSessionValid function right ?


To whom it may concern (Rafael probably :-)) two enhancement requests that I can think of with the SSO integration is:

1 - Expose in SSO interface specific API to assign user to group so that it won't look like a hack within authenticate method...
2 - drop the two session attributes and instead expose in SSO interface specific API to get email and password while supplying the request, in my case I store an Object on the session and the integration with JForum forces me to store also the two strings email and password on the session, this affects the session that's accessible all over my webapp... JForum doesn't need to force me storing the user details in a specific manner on the session, all it needs is to ask me to extract it for him from the request...

your help on this is appreciated,

thanks,
Me.
11 years ago
Hi,

I have been trying to integrate JForum into my webapp in the past few weeks...

the product/application itself looks pretty mature and stable in my opinion. however, I've noticed that all links to help are broken (e.g. http://www.jforum.net/help.htm)

this gives me some hard time in trying to understand the design of the product so that I can interfere some components like SSO, DB connection handling and stuff like this which I already have in my webapp...

is there any reference to documentation of the product ? even for older versions would be useful...

thanks,
Dog Lee.
11 years ago
Hi,

before integrating my product with JForum, I'd like to find out whether it supports Hebrew language.

Hebrew is somewhat 'special' I18N case (like Arabic) due to the fact that it is an RTL (Right To Left) language.

I couldn't find any explicit statement about this matter and it is a go/no go for me...

your help is appreciated,

thanks,
Dog Lee.
11 years ago