Feeds and authentication

Description

Before Liferay 5.2.x you could access Message Board feeds from a private page without authentication. Since 5.2.x you must authenticate for accessing such a feed.
Instead of using HTTP (Basic) Authentication, xou must use the form-based auth.

That is very annoying, because common feed readers only know to authenticate by using HTTP Authentication. And the is a property in portal.properties where you can set the non auth paths "auth.public.paths". If this property is there and "/message_boards/rss" in included in this property, there should be no authentication required for feeds.

So what is the point? Either the entries in "auth.public.paths" are respected with no exceptions, or feeds should be accessible by using HTTP (Basic) Authentication, if a feed is from a Message Board in a private community.

Environment

Liferay 5.2.x

Activity

Show:

Raymond AugéJuly 29, 2011 at 12:45 PM

Please note that this does NOT allow private feeds to be used in the RSS Portlet.

The RSS Portlet would have to be modified to support basic authentication, which would require storing and using a username/password to authenticate to the feed. That would be a different feature altogether from this one.

Raymond AugéFebruary 16, 2011 at 12:48 PM

Authentication will now be seemless. If you access a feed while logged in, then it will simply work. When not logged in, it will incur basic authentication.

I tested with external RSS client which supports basic auth to ensure that it was working as expected (Liferea Feed Reader; not affiliated with Liferay, name is coincidental).

Raymond AugéFebruary 16, 2011 at 12:45 PM

Better fix.

KC OniasJanuary 19, 2011 at 4:11 PM

Tobias KaeferAugust 26, 2010 at 8:37 PM

And I have checked it (this would only need two minutes of your time):
The issue is still present in LR 6.0.5.

So PLEASE fix this!

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Branch Version/s

6.0.x
5.2.x

Backported to Branch

Committed

Affects versions

Priority

Zendesk Support

Created August 26, 2010 at 8:31 PM
Updated June 24, 2023 at 9:50 AM
Resolved February 17, 2011 at 5:33 PM

Flag notifications