Hi Jason,
Do you have to disable the Liferay OpenSSO filter explicitly? -> Yes. And you need to create your CustomSSFilter.
com.liferay.portal.servlet.filters.sso.opensso.OpenSSOFilter=false
And then, add to your hook an OpenSSOToolsImpl.java modifiyng the new call to openAM, instead the deprecated call:
private static final String _VALIDATE_TOKEN = "/json/sessions/";
...
String url = serviceUrl.concat(_VALIDATE_TOKEN).concat(URLEncoder.encode(CookieKeys.getCookie(request, _COOKE_NAME), "UTF-8")).concat("?_action=validate");
...
if (responseCode == HttpURLConnection.HTTP_OK) {
String data = StringUtil.read(httpURLConnection.getInputStream());
if (StringUtil.toLowerCase(data).contains("\"valid\":true")) {
authenticated = true;
}
}
did you specify a "before-filter" or "after-filter" as part of your liferay-hook.xml? -> No.
liferay-hook.xml:
<servlet-filter>
<servlet-filter-name>CustomSSOFilter</servlet-filter-name>
<servlet-filter-impl>xxx.yyyy.filters.sso.opensso.CustomSSOFilter</servlet-filter-impl>
</servlet-filter>
<servlet-filter-mapping>
<servlet-filter-name>CustomSSOFilter</servlet-filter-name>
<url-pattern>/c/portal/login</url-pattern>
<dispatcher>FORWARD</dispatcher>
<dispatcher>REQUEST</dispatcher>
</servlet-filter-mapping>
<servlet-filter-mapping>
<servlet-filter-name>CustomSSOFilter</servlet-filter-name>
<url-pattern>/c/portal/logout</url-pattern>
<dispatcher>FORWARD</dispatcher>
<dispatcher>REQUEST</dispatcher>
</servlet-filter-mapping>
