Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-122216

URL on the verification email has "nullnull" instead of the domain when signing in OpenID Connect

    Details

      Description

      Prerequisites:

      1. You must create an OAuth Client ID Google credential for your local Liferay instance at https://console.developers.google.com/. If you're using domain localhost and port 8080, you can authorise the following URI: http://localhost:8080/c/portal/login/openidconnect;
      2. You must have an email server. You can use https://mailtrap.io/.

      Steps to reproduce:

      1. In order to configure your instance to send emails, first, set no value to the property mail.send.blacklist in your portal-ext.properties;
      2. Startup you app server and, after you're logged in with an admin user, open the menu and go to Control Panel > System > Server Administration > Mail;
      3. Setup your outgoing SMTP server with its host, port, username and password (leave StartTLS enabled and "Use a Secure Network Connection" disabled);
      4. Hit save;
      5. Open the menu and go to Control Panel > Configuration > System Settings > SSO > OpenID Connect, enable it and hit Save;
      6. On the same system setting, choose OpenID Connect Provider, under the Virtual Instance Scope section, and click to add a new provider;
      7. Fill the following fields:
      8. Hit save;
      9. Open the menu and go to Control Panel > Configuration > Instance Settings > User Authentication and make sure the "Require strangers to verify their email address?" checkbox is marked;
      10. Hit save;
      11. Logout from the admin user;
      12. Click to sign back in;
      13. Click on OpenID Connect;
      14. Select the Google provider and then click to sign in;
      15. Enter the credentials of a valid Google account and log in;
      16. You'll be redirected to DXP's code verification page;
      17. Wait to receive the email on your inbox and check its content.

      Expected result:
      The email should be something like this (the verification code should be different):

      Dear new user,
      
      Please verify your email address for http://localhost:8080 at http://localhost:8080/c/portal/verify_email_address?ticketKey=46542e10-5f4b-de3c-ec71-3328bd4d11c6&p_l_id=2.
      
      Your verification code is 46542e10-5f4b-de3c-ec71-3328bd4d11c6
      
      Sincerely,
      Joe Bloggs
      test@domain.invalid
      http://localhost:8080
      

      Actual result:
      The body of the email uses "nullnull" instead of the real domain:

      Dear new user,
      
      Please verify your email address for at nullnull/portal/verify_email_address?ticketKey=46542e10-5f4b-de3c-ec71-3328bd4d11c6&p_l_id=2.
      
      Your verification code is 46542e10-5f4b-de3c-ec71-3328bd4d11c6
      
      Sincerely,
      Joe Bloggs
      test@domain.invalid
      

        Attachments

          Activity

            People

            Assignee:
            della.wang Della Wang (Inactive)
            Reporter:
            rodrigo.paulino Rodrigo Paulino
            Participants of an Issue:
            Recent user:
            Enterprise Release HU
            Engineering Assignee:
            Rodrigo Paulino
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              18 weeks, 6 days ago

                Packages

                Version Package
                7.2.X
                7.3.X
                Master