Platform Explorer / Nuxeo Platform LTS 2015 7.10

Extension point domains

Enable clients to register new security domains in the application

There are 2 predefined security domains that clients may define:

  • The nuxeo-client-login -
  • The nuxeo-system-login - used to log in programmatically as the system user

By default these domains are not defined. If you need a system login and/or a client login you should contribute the domains defining the login modules to be used.

Contribution Descriptor

Existing Contributions

  • nuxeo-runtime-7.10-HF06.jar /opt/tmp/tmp-explorer/nuxeo-cap-7.10-tomcat/nxserver/config/login-config.xml
    <extension point="domains" target="org.nuxeo.runtime.LoginComponent">
    
    	  <domain name="nuxeo-system-login">
    	    <login-module code="org.nuxeo.runtime.api.login.SystemLoginModule" flag="required"/>
          <login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
            <option name="password-stacking">true</option>
    			  <option name="multi-threaded">true</option>
      	  </login-module>
    	  </domain>
    
        <domain name="nuxeo-client-login">
          <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
            <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
            <option name="useUserIdentificationInfoCB">true</option>
          </login-module>
          <login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
            <option name="password-stacking">true</option>
            <option name="restore-login-identity">true</option>
            <option name="multi-threaded">true</option>
          </login-module>
    	  </domain>
    
    
      	<domain name="nuxeo-webengine">
    	    <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
                  <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
                  <option name="useUserIdentificationInfoCB">true</option>
          </login-module>
          <!--login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
            <option name="password-stacking">true</option>
            <option name="multi-threaded">true</option>
          </login-module-->
        </domain>
    
      </extension>
  • nuxeo-platform-login-7.10.jar /OSGI-INF/default-loginConfig.xml
    <extension point="domains" target="org.nuxeo.runtime.LoginComponent">
        <domain name="nuxeo-ecm-web">
          <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
            <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
            <option name="useUserIdentificationInfoCB">true</option>
          </login-module>
          <login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
            <option name="password-stacking">true</option>
            <option name="restore-login-identity">true</option>
            <option name="multi-threaded">true</option>
          </login-module>
        </domain>
    
        <domain name="nuxeo-ecm">
          <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
            <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
            <option name="useUserIdentificationInfoCB">true</option>
          </login-module>
        </domain>
      </extension>