Legacy Knowledge Base
Published Jun. 30, 2025

How can I access OpenIdConnectProvider classes in 7.4 U34+?

Written By

Madeleine Clay

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

  • The Liferay classes com.liferay.portal.security.sso.openid.connect.OpenIdConnectProvider; and com.liferay.portal.security.sso.openid.connect.OpenIdConnectProviderRegistry; were removed in U34+ by LPS-150092.
  • How can I replace them in my customization? 

Environment

  • DXP 7.4

Resolution

  • One way to achieve replacement classes is to recreate the OpenIdConnectProviderRegistryImpl.findOpenIdConnectProvider method through customizations.
    • This will require retrieving all entries from the _configuration table which begins with com.liferay.portal.security.sso.openid.connect.internal.configuration.OpenIdConnectProviderConfiguration, and then iterating through and find the one with the matching providerName.
    • We did this before via an in-memory map (see LPS-150092 for more details). Basically, upon server startup or configuration addition/subtraction, we would update the map as providerName (key) to configuration (value). From there we could easily look up the configurations.
    • You could also skip the map and just perform the configuration retrieval and filtering per request.
  • Alternatively, you may be able to access the data using the following script, since we now create an OAuthClientEntry for each OpenID Connect connection.
    • com.liferay.oauth.client.persistence.service.OAuthClientEntryLocalServiceUtil.getOAuthClientEntries(-1, -1).each { client ->
      out.println(client);
      }

Additional Information

  • OpenIdConnectProvider configurations are are no longer stored locally with the inclusion of LPS-150092, so we cannot easily retrieve them with a class like OpenIdConnectProviderRegistryImpl.findOpenIdConnectProvider. This code change can be reviewed at https://github.com/brianchandotcom/liferay-portal/compare/03162209ce...23b907d1cf.
  • Because the OpenIdConnectProvider objects were meant to be gathered dynamically depending on login/authentication needs rather than to be used on their own, everything was moved to the backend, where it isn’t very accessible with public APIs.
    The OpenIdConnectProviderRegistryImpl class has been historically internal, as its contents were never meant to be leveraged externally.
Did this article resolve your issue ?

Legacy Knowledge Base