Feeds and authentication

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 6.0.5 GA
• Fix Version/s: --Sprint - SP, 6.1.0 CE RC1
• Component/s: Authentication
• Labels: None
• Environment: Liferay 5.2.x
• Branch Version/s:
  5.2.x, 6.0.x
• Backported to Branch:
  Committed
• Similar Issues: Show 5 results ; ;

  LPS-3622	Feeds and authentication
  LPS-9117	RSS Feed Portlet - Authentication Support
  LPS-15705	User is automatically signed in after access a feed requires basic authentication.
  LPS-18686	Message boards RSS feed private and public URL problems
  LPS-23205	Private page Blog RSS doesn't work correctly

Before Liferay 5.2.x you could access Message Board feeds from a private page without authentication. Since 5.2.x you must authenticate for accessing such a feed.
Instead of using HTTP (Basic) Authentication, xou must use the form-based auth.

That is very annoying, because common feed readers only know to authenticate by using HTTP Authentication. And the is a property in portal.properties where you can set the non auth paths "auth.public.paths". If this property is there and "/message_boards/rss" in included in this property, there should be no authentication required for feeds.

So what is the point? Either the entries in "auth.public.paths" are respected with no exceptions, or feeds should be accessible by using HTTP (Basic) Authentication, if a feed is from a Message Board in a private community.

[Tobias Kaefer]

Clone of this one: http://issues.liferay.com/browse/LPS-3622
As I said in my message board post:
It is fixed when it is fixed!
If there hasn't been any development in this area, this bug this is present!
(see http://www.liferay.com/community/forums/-/message_boards/message/5445961)

[Tobias Kaefer]

And I have checked it (this would only need two minutes of your time):
The issue is still present in LR 6.0.5.

So PLEASE fix this!

[Kristoffer Onias]

please see http://issues.liferay.com/browse/LPS-3622

[Raymond Auge]

Better fix.

[Raymond Auge]

Authentication will now be seemless. If you access a feed while logged in, then it will simply work. When not logged in, it will incur basic authentication.

I tested with external RSS client which supports basic auth to ensure that it was working as expected (Liferea Feed Reader; not affiliated with Liferay, name is coincidental).

[Raymond Auge]

Please note that this does NOT allow private feeds to be used in the RSS Portlet.

The RSS Portlet would have to be modified to support basic authentication, which would require storing and using a username/password to authenticate to the feed. That would be a different feature altogether from this one.