(Opens New Window)
Mark as an Answer
AutoLogin hook via https then switch to http and save session?
November 3, 2011 3:22 PM
Join Date: February 8, 2011
I have an AutoLogin hook that takes in some user parameters and logs the user in. To secure this the user gets passed to the home page via https. Afterwards if the user clicks a link it will switch to http and the user won't be logged in anymore. This is by design on the liferay side to keep hackers out. If I force https for the whole site this resolves the problem and we take a performance hit.
After the user is authenticated in the AutoLogin hook, how can I switch to http and keep the users session? That way everything will be http after the initial login.
Sign in to vote.
Please sign in to flag this as inappropriate.