Aller au contenu principal
Jahia Store
FR

Jahia OAuth

supported
Télécharger 5.1.0

Informations

Identifiant du module
jahia-oauth
Identifiant de groupe
org.jahia.modules
Statut
supported
Catégorie
Authentication
Auteur
JSG
Site web du développeur
http://www.jahia.com
Nécessite Jahia
8.2.3.0
Publié le
2026-10-02
Source
scm:git:git@github.com:Jahia/jahia-oauth.git
Étiquettes
  • social
  • oauth
  • login
  • authentication

This is the backbone of Jahia Oauth solutions and the first module you'll need to install if you want to add oauth and social login on your Jahia website. This module is part of Jahia Oauth package.

Documentation available on Jahia Academy at Configuring OAuth modules and social login

 

Captures d'écran

Versions

Bug fixes

  • Fixed a security vulnerability in the OAuth callback of the France Connect connector that could lead to remote code execution. 
  • Hardened the sign-in flow by replacing the session identifier, which could be spoofed, with a signed session token. 
  • Fixed the OAuth connector buttons so a title, CSS class or HTML id containing special characters now renders as written; a sign-in button now accepts a result only from the popup it opened and reports the outcome as a strict true or false; and opening the result page directly no longer stops its script. 
  • Fixed OAuth sign-in on a clustered installation, where the node handling the provider callback could not retrieve the session started on another node. 
Nécessite Jahia 8.2.3.0Publié le 2026-10-02

This releases makes it possible to run the module with the latest version of Jahia authentication modules.

There are no functional changes in this module which was released solely for compatibility purposes.

Nécessite Jahia 8.2.3.0Publié le 2026-06-30

Bug fixes

  • Secured the FranceConnect OAuth callback so a client-supplied URL can only be forwarded to a valid callback-action page path. 
Nécessite Jahia 8.2.0.0Publié le 2026-10-02

Although this is a new major release, no breaking changes are expected in this version. The major digit upgrade was done to highlight the update of the minimum version of Jahia, which went from 8.0.1.0 to 8.2.0.0.

Improvements

  • Enabled mapping of nested and array-valued properties from an identity-provider token

Misc

  • Updated Jahia minimum compatibility from 8.0.1.0 to 8.2.0.0
  • Updated Jackson from 2.12.0 to 2.21.4
Nécessite Jahia 8.2.0.0Publié le 2026-06-03

Bug fixes

  • Secured the FranceConnect OAuth callback so a client-supplied URL can only be forwarded to a valid callback-action page path.
Nécessite Jahia 8.0.1.0Publié le 2026-10-02

Improvements

  • Introduced support for Dynamic Property Mapping from OAuth JSON Responses 
  • Introduced OSGI configuration for UserInfo endpoints

Misc

  • Migrated from Blueprint to OSGi DS
  • Updated scribejava-apis from 8.1.0 to 8.3.3 
Nécessite Jahia 8.0.1.0Publié le 2026-01-21

Improvements

 

  • Provided an implementation and documentation on how to extract data from OAuth calls. The method is documented on this Academy page.  
  • Exposed OpenIdToken in Jahia OAuth
  • Added the ability to register a custom connector. The sample module documentation was updated to reflect these changes: https://github.com/Jahia/sample-oauth 

Bug fixes

  • Fixed missing translation
Nécessite Jahia 8.0.1.0Publié le 2022-05-18

Bugfixes

  • Fixed typo on french resource bundle
  • Fixed linkedin connector to correctly handle login and email mapping

New features and improvements

  • Make it possible to extend Jahia OAuth to register new custom implementations
  • Upgraded scribejava to latest version
  • Improved look & feel of OAuth buttons 
  • Hide buttons when user is already authenticated
Nécessite Jahia 8.0.1.0Publié le 2021-03-26
  • Added Github OAuth connector
  • Added Facebook OAuth connector
  • Added LinkedIn OAuth connector
Nécessite Jahia 8.0.1.0Publié le 2021-01-11
  • Improved the protection of the Actions against CSRF attacks
  • Separated the authentication from the user creation (see Jahia Authentication module)
  • Upgraded Scribe API
  • Added Google Oauth connector
  • Added FranceConnect connector
Nécessite Jahia 8.0.1.0Publié le 2020-12-02

New release compatible with Jahia 8.0

Nécessite Jahia 8.0.0.0Publié le 2020-12-02

New features and improvements

  • Make it possible to extend Jahia OAuth to register new custom implementations
  • Fixed issue with CSRF guard
Nécessite Jahia 7.2.0.0Publié le 2021-04-01
Nécessite Jahia 7.2.0.0Publié le 2017-12-08
Nécessite Jahia 7.2.0.0Publié le 2017-09-04
Nécessite Jahia 7.2.0.0Publié le 2017-05-30