Making Liferay Mashable?

[James McGovern, modificado hace 13 años.]

Imagine a scenario where the Chief Architect of Facebook wanted to convert everything to Liferay? What would need to change in order to support facebook-style integration by third-parties?

[Richard Sezov, modificado hace 13 años.]

Nothing.

Add any portlet to a page. Then click Configuration -> Sharing. Choose whichever option is most appropriate for the site in which you want to embed the portlet. If you wish, you can check the box allowing users to do the same thing.

--Rich

[James McGovern, modificado hace 13 años.]

I would think it would require the following:

• Support for the notion of an API key to delineate authorized plugins
• The ability to specify privacy settings
• The ability for each portlet to have its own encryption/decryption key
• The ability to restrict deployment of new plugins unless they were signed
• etc

[James McGovern, modificado hace 13 años.]

The security model of Liferay assumes that every portlet is automatically entitled to read all the data about a user. To solve for this, we would need to think about something that feels like oauth for each portlet.

[Stian Sigvartsen, modificado hace 12 años.]

I think you've hit the nail on the head!
It's been a year and a half since your post was made. Do you know if anything has taken place or is in the pipeline to implement this OAuth support?

I recently posted a question about this explaining a scenario which would be one use case.
http://www.liferay.com/community/forums/-/message_boards/message/11674554

-Stian