[SOLVED] Setting session attribute in auto login hook

[Ingemar Jansson，修改在13 年前。]

Hi

I have set an attribute in the HttpSession in an auto login hook.
Then I set the request attribute AutoLogin.AUTO_LOGIN_REDIRECT.

When I try to get the attribute from the session it's not there.

I see in the code that there is a redirect when AutoLogin.AUTO_LOGIN_REDIRECT attribute is set but I thought the JSESSIONID cookie should keep the same session even after a redirect.

Is it not possible to set a session attribute in an auto login hook and fetch it from the page I'm redirecting to?

Regards
Ingemar

[Thomas Berg，修改在13 年前。]

Hej Ingemar,

It's possible, check these settings in portal(-ext).properties:

##
## Request
##

    #
    # Portlets that have been configured to use private request attributes in
    # liferay-portlet.xml may still want to share some request attributes. This
    # property allows you to configure which request attributes will be shared.
    # Set a comma delimited list of attribute names that will be shared when the
    # attribute name starts with one of the specified attribute names. For
    # example, if you set the value to "hello_,world_", then all attribute names
    # that start with "hello_" or "world_" will be shared.
    #
    request.shared.attributes=LIFERAY_SHARED_

##
## Session
##

    #
    # Portlets that have been configured to use private session attributes in
    # liferay-portlet.xml may still want to share some session attributes. This
    # property allows you to configure which session attributes will be shared.
    # Set a comma delimited list of attribute names that will be shared when the
    # attribute name starts with one of the specified attribute names. For
    # example, if you set the value to "hello_,world_", then all attribute names
    # that start with "hello_" or "world_" will be shared.
    #
    # Note that this property is used to specify the sharing of session
    # attributes from the portal to the portlet. This is not used to specify
    # session sharing between portlet WARs or from the portlet to the portal.
    #
    session.shared.attributes=org.apache.struts.action.LOCALE,COMPANY_,USER_,LIFERAY_SHARED_

HTH

Thomas

[Ingemar Jansson，修改在13 年前。]

Hej Thomas

Thank you.

Regards
Ingemar

[Gary Pinkham，修改在13 年前。]

Ingemar Jansson:

I have set an attribute in the HttpSession in an auto login hook.

Curious.. Is Auto Login Hook the same as "Custom Authentication"? as described here: Developing a custom authentication system

I can't seem to figure out how to get access to the HttpSession from within the Authenticator..

Thanks!
Gary

[Davy Kamerbeek，修改在11 年前。]

I'm having the same issue.. Can somebody give some pointers?

[Davy Kamerbeek，修改在11 年前。]

Ok, figured it out. The autologin has it's own HttpSession. When the user is logged in a new HttpSession is created.

So when you want to set some http session objects, you must set those objects after the autologin. So use a custom PostLoginAction that does that.

[vincent alfandari，修改在10 年前。]

If you need to retrieve a variable such as a token SSO you can do this :
- In the hook AutoLogin set a request parameter :

request.setParameter("tokenSSO", tokenSSO)

- Add a hook at event "login.events.post" that retrieve the request parameter and put it in the session

String tokenSSO = request.getParameter("tokenSSO")
request.getSession().addAttribute("tokenSSO", tokenSSO)

[Menno Avegaart，修改在9 年前。]

HttpServletRequest doesn't have a setParameter method, so how did you really do this?

[David H Nebinger，修改在9 年前。]

Liferay wraps the incoming HttpServletRequest with it's own class that allows for parameter setting.

[Nithin KV，修改在7 年前。]

Hi, Pls let me know How do you achieve this ? which class can wrap httpservlet request and set parameter ?

[Kowbathullah Gnaniyar，修改在7 年前。]

Nithin KV:

Hi, Pls let me know How do you achieve this ? which class can wrap httpservlet request and set parameter ?

Nithin,

To get the Session object between two hooks , you can try this in liferay 6.1

1. Set this property in portal-ext.properties

#
    # Set a comma delimited list of attribute names that will be copied to the
    # new session when the property "session.enable.phishing.protection" is set
    # to true. Also if you set the value to "START_", "END_", then all attribute names
    # that start with "START_" or "END_" will be shared between hooks. 
    #
  session.phishing.protected.attributes=START_TIME

2. Setting the session in Hook-1

 HttpServletRequest request = PortalUtil.getHttpServletRequest(actionRequest);
	request.getSession(true).setAttribute("START_TIME", "something");

3. Receiving session object in Hook-2 passing from Hook-1

 String sessionFromHook1= (String)request.getSession().getAttribute("START_TIME");

Hope this helps.

[Nithin KV，修改在7 年前。]

Thanks Zubair. it worked!!