This hook adds a new authentication module for Liferay 6.1 /api/* services.

User can specify in his/her account details custom application token. 3rd party applications can use the token to authenticate themselves.

3rd party applications can specify the authentication token using:

Example

Go to Control Panel -> My Account -> Custom Fields
Enter random token into Application Tokens field. Be sure to specify a long random token that can't be easily guessed, you can use one of online GUID generators: https://www.google.com/search?q=online+guid+generator (e.g. b0da5ad6-04d5-462d-9e7c-b197d62413ec)
You can specify more tokens, delimited by a new line or by comma
Save
To test the URL parameter use: http://localhost:8080/api/secure/jsonws/company/get-company-by-web-id/web-id/liferay.com?applicationToken=b0da5ad6-04d5-462d-9e7c-b197d62413ec
To test HTTP header use cURL from linux/cygwin command line: curl 'http://localhost:8080/api/secure/jsonws/company/get-company-by-web-id/web-id/liferay.com' --header 'x-application-token: b0da5ad6-04d5-462d-9e7c-b197d62413ec'

Build & Deploy

Download sources using the GitHub "ZIP" button

Call `mvn clean package' and copy the built WAR file into deploy directory.

Or edit pom.xml, define correct location for: <liferay.auto.deploy.dir> and call `mvn clean package liferay:deploy'

Licenced under LGPL.