Authentification Liferay avec OAuth2 — Guide complet

 Les applications modernes n’authentifient plus directement les utilisateurs.

Elles délèguent l’authentification à un fournisseur d’identité (Google, Azure AD, Keycloak…) via OAuth2.

Dans Liferay, OAuth2 permet le SSO sécurisé entre portails, microservices et APIs.

Ce guide explique comment fonctionne OAuth2 et comment le configurer.

Cette architecture est couramment utilisée dans les environnements microservices modernes.

👉 environnements microservices modernes

📌 Qu’est-ce que OAuth2 dans Liferay ?

OAuth2 permet :

  • Connexion externe (Google / Azure / IdP)

  • Accès API sécurisé

  • Authentification par token

  • Frontend et backend découplés

L’application n’utilise plus de mot de passe → seulement des tokens d’accès.

🖼️ Flux d’authentification OAuth2

🧠 Rôles OAuth2

RôleDescription
Resource OwnerUtilisateur
ClientLiferay
Authorization ServerFournisseur d’identité
Resource ServerAPIs

🛠 Étape 1 — Activer OAuth2 dans Liferay

Aller dans :

Control Panel → Security → OAuth2 Administration

Créer une nouvelle application OAuth2.

🛠 Étape 2 — Configurer le client

Renseigner :

  • Name

  • Client ID

  • Client Secret

  • Redirect URI

Exemple :

http://localhost:8080/c/portal/oauth2/redirect

🖼️ Configuration OAuth2

🛠 Étape 3 — Configurer le fournisseur d’identité

Exemple Keycloak :

Valid Redirect URI:
http://localhost:8080/*

Scopes :

openid profile email

🛠 Étape 4 — Mapper les attributs utilisateur

Associer les champs IdP avec Liferay :

IdPLiferay
emailemailAddress
given_namefirstName
family_namelastName

🧠 Étape 5 — Utilisation du token

Après connexion Liferay reçoit :

access_token
refresh_token
id_token

Utilisation API :

Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9

🖼️ Exemple token

⚠️ Problèmes fréquents

Redirect URI invalide
→ doit correspondre exactement

Utilisateur non créé
→ mapping manquant

Boucle de login
→ horloge serveur différente

Token refusé
→ mauvais scope/audience

🔐 Bonnes pratiques sécurité

✔ HTTPS obligatoire
✔ Expiration courte des tokens
✔ Refresh tokens
✔ Limiter scopes
✔ Synchroniser horloge serveur

📚 Articles recommandés

Ces sujets complètent une architecture d’entreprise sécurisée.

🎯 Conclusion

OAuth2 rend Liferay prêt pour l’entreprise :

  • Authentification centralisée

  • APIs sécurisées

  • Accès multi-applications

Une fois configuré correctement, les utilisateurs accèdent à toutes les applications sans se reconnecter.

💼 Support professionnel disponible

Si vous rencontrez des problèmes sur des projets réels liés au développement backend d’entreprise ou à l’automatisation des workflows, je propose des services de conseil payants, de débogage en production, de support projet et de formations ciblées.

Les technologies couvertes incluent Java, Spring Boot, PL/SQL, Azure, CMS, ainsi que l’automatisation des workflows (jBPM, Camunda BPM, RHPAM), DMN/Drools.

📧 Contact: ishikhanirankari@gmail.com | info@realtechnologiesindia.com

🌐 Website: IT Trainings | Digital lectern | Digital rostrum | Digital metal podium     



Comments

Post a Comment

Popular posts from this blog

OOPs Concepts in Java | English | Object Oriented Programming Explained

Image
🔹OOPS (Object Oriented Programming System) in Java Object-Oriented Programming (OOPS) is a programming paradigm that uses classes and objects to design software. It simplifies development and maintenance by applying key concepts: 📌 Class: Class   is a user-defined data type which defines its properties and its functions. Class is the only logical representation of the data. For example, Human beings in an organisation is a class like Employee. The age, name, department, salary etc. of a human being/employee are its properties, and the jobs performed by the employees in an organisation are known as functions.  The class does not occupy any memory space till the time an object is instantiated. A class is a user-defined data type that defines properties and functions. For example: Class: Employee Properties: name, age, salary Functions: work(), attendMeeting() A class does not occupy memory until an object is created. ...
Read more

Scopes of Signal in jBPM

Image
💡 Introduction Signals in jBPM 7 are a core part of event-driven workflow design. They allow asynchronous communication between process instances, making it possible to start , interrupt , or coordinate processes without direct linking. However, signals can have different scopes , which define how far the signal travels and who receives it . Let’s explore the four available scopes in detail: 🔹 Process Scope 🔹 Default Scope 🔹 External Scope 🔹 Project Instance Scope 🧩 1️⃣ Process Scope 📘 Definition Process scope signals are local to a single process instance or its child subprocesses . They are not visible outside that instance hierarchy. 📋 Use Case Used for communication inside the same process , like triggering subprocesses or event sub-processes. 🖼️ Process Scope Example Below is an example of a simple process-scoped signal. Only this process (or its subprocess) will catch this signal. ⚙️ 2️⃣ Default Scope 📘 Definition The default scope ...
Read more

jBPM Installation Guide: Step by Step Setup

  jBPM Installation Guide – Step by Step for Beginners If you are starting with jBPM (Java Business Process Management) , the first step is to set up your environment. In this guide, we’ll walk through how to install jBPM, configure it, and run your first business process. 🔎 What is jBPM? Before we dive into installation, a quick recap: jBPM is an open-source Business Process Management (BPM) suite , written in Java, that allows you to model, execute, and monitor workflows using BPMN 2.0 standards. It can run standalone , embedded in applications , or deployed on a Java EE server . 🖥️ Prerequisites Before installing jBPM, make sure you have: Java JDK 11 or later (Java 17 is commonly used) Maven 3.x (for building and managing dependencies) Git (optional, if you want to clone sample projects) A Database (H2, MySQL, PostgreSQL, or Oracle) – jBPM ships with H2 for testing At least 4GB RAM (8GB recommended for Workbench & KIE Server) 📦 Download ...
Read more