Liferay session before and after login is different
By default, liferay comes with the configuration that while doing the
login invalidate the current session and generate the new session. And
following configuration in the portal.properties is the responsible for
it.
#
# Set this to true to invalidate the session when a user logs into the
# portal. This helps prevents phishing. Set this to false if you need the
# guest user and the authenticated user to have the same session.
#
session.enable.phishing.protection=true
To keep the same session between the guest pages and the private pages after login. we will have turn this flag this off.
set this flag to false in the portal-ext.properties file
# Set this to true to invalidate the session when a user logs into the
# portal. This helps prevents phishing. Set this to false if you need the
# guest user and the authenticated user to have the same session.
#
session.enable.phishing.protection=false
This scenario could be very important in online shopping kind of web sites where user can choose the see and add products in the shopping cart without sign-in. But for check-out, user needs to login into the system. In this scenario user session details needs to remember after login as well.
# Set this to true to invalidate the session when a user logs into the
# portal. This helps prevents phishing. Set this to false if you need the
# guest user and the authenticated user to have the same session.
#
session.enable.phishing.protection=true
To keep the same session between the guest pages and the private pages after login. we will have turn this flag this off.
set this flag to false in the portal-ext.properties file
# Set this to true to invalidate the session when a user logs into the
# portal. This helps prevents phishing. Set this to false if you need the
# guest user and the authenticated user to have the same session.
#
session.enable.phishing.protection=false
This scenario could be very important in online shopping kind of web sites where user can choose the see and add products in the shopping cart without sign-in. But for check-out, user needs to login into the system. In this scenario user session details needs to remember after login as well.
Comments
Post a Comment