Adobe Experience Manager Sites

Hi all,in my current project we are thinking of a strategy to secure GET endpoints which are accessible by anonymous users. The goal is to have some kind of a unique temporary token that will be validated on the backend, so that it is more difficult to hit the endpoint with no limitation. I am looking for a code-side solution, and not firewall rules which are already in place.  My initial idea was to extend CSRF protection to these GET endpoints, however according to the CSRF documentation, these tokens cannot be generated by anonymous users: The CSRF Protection Framework | Adobe Experience ManagerAnd indeed, if I hit /libs/granite/csrf/token.json as anonymous user, I can see an empty response. Is there a way to enable generation of CSRF tokens for anonymous users too? If yes, do you see any potential security issues related to exposing the CSRF generator to anonymous users?

We have a requirement share a specific page in dispatcher to a limited audience with an authentication,since its officially not public. How can we achieve this? 

Hi All, I have followed this blog (Experiencing Adobe Experience Manager (AEM, CQ): AEM Cloud Service - Multiple Composite Multifields in Content Fragments Editor ) to create below CF with composite multifield using custom js.1. CF initially displays fields with JSON object values. These fields are subsequently populated and rendered correctly.When working with large data, this loading speed is increased. How to improve the loading speed to display CF correctly?2. There are also occasional instances where the fields remain empty, and after refreshing the page, we can see the fields displayed correctly.  How to resolve the empty fields issue?            If anyone has a solution, please let me know.

For AD0-E903 Adobe Workfront Project Manager Certified Professional, I logged in exactly 15 mins before , and while setting up , the proctor mentioned that task manager has to be shown , but since my professional laptop is restricted from those, i couldn't for which proctor requested for personal laptop , but in personal laptop adobe by default was fetching my personal mail id even though i tried to log out. After several attempts , proctor requested to reschedule and confirmed that i can reschedule without any new payment. But post the session , all i can see is the status as Incomplete and its not allowing to reschedule.If reschedule is not an option proctor should have informed me . Then why he confirming i can go ahead with reschedule option since i have not started the exam. Please check the recordings. Then how we can trust this exam procedures.Exam ID: 16210352130

How to add date field in the content fragment which is created programatically

hello , I am not able to send mails from dev environment can anyone suggest how to do configurations in dev1.

Hi Team, Is there any way to extract the all the  components report which used on only live pages no test pages from author. In  AEM provides an option to see the component details  under tools -->components which provides live usage for each component based on sling resource type of the component. but is there any way to extract complete report for all components and pages? looked ACS-commons also but there are extracting all but only from author not from live usage  

 In the OOTB carousel we updated the HTL and kept the below code.We are including image component in carousel<div data-sly-repeat.item="${carousel.items}" data-sly-resource="${item.name }" </div>The above code generates below on the console,How to retrieve 'alt' and 'title' from this so that can be consumed by the FE team.Thanks,Geo 

I am uploading assets programatically to aem cloud using AssetManager createOrReplaceAsset methodimage gets uploaded to AEM however it is taking 5-10 minutes to process the image, apply rendition and properties. I see a call to dynamic media server   https://<aem-auther-server>/adobe/dynamicmedia/deliver/dm-aid--0a0c72d9-d7e4-4f8f-80ae-8448bdaeddff/240-f-322662977-sd7x9fwrjheiv8p1ctprlguhoq9w8fzr.jpg?quality=85&preferwebp=true&width=1600    We dont have dynamic media install, why it is getting uploaded. How do I get the image instantaneously, are there any post processing required?Here is my code   JackrabbitValueFactory valueFactory = (JackrabbitValueFactory) session.getValueFactory(); // Download the file with buffering InputStream inputStream = downloadFromSignedUrl(signedUrl); BufferedInputStream bufferedInputStream = new BufferedInputStream(inputStream); // Detect MIME type

Hello, we are migrating our Adobe Developer Console project from JWT to OAuth, as described here: https://developer.adobe.com/developer-console/docs/guides/authentication/ServerToServerAuthentication/migration/In our Adobe Developer Console projects, we have Adobe Events integrations, using our AEM as a Cloud instances, and our Cloud Manager, as events providers.Question: Are there any additional steps to migrate our events providers so they use OAuth? Or is it all automatically managed by Adobe cloud services? I coudnt find any definitive answer in the docs.

Hello,  Client website has preview configured and before going on Prod we are testing on preview, so we have login module and once we logged in it automatically navigating to prod content. May I know where we can check preview configuration, because we don't have any preview runmodes available as well What can be our debug points?

Hi, How to retrieve jcr:uuid from a Content Fragment base path in a Graph QL query. We are using AEM 6.5 with service pack 6.5.17. Thanks,Divya  

Hi Team,I need to configure a workflow launcher to trigger whenever the cq:tags property is updated or modified on a page. Could you please provide guidance on how to set up this condition in the workflow launcher?Thank you in Advance!Thanks & RegardsVeera 

Hello All,I have added smart tag step to the OOTB Update asset workflow. Now , how do i check in this code into codebase. I mean what are all the places i need to add /conf and /var ?

  Hello, I need to validate json/yaml files prior to loading it to the assets in AEM 6.5, if the file is not valid than show an error to the author, if it is valid than just upload it. Right now I am trying to overlay and customize the upload.js file which is meant for handle the "Upload" button, if the file is in the myproject folder and it is json/yaml, then send it to the servlet for validation. Is it ok? Is there a better approach?

all ZIP files for AEM SDK on software portal are giving issues of unexpected EOF error preventing to extract JAR file. how can I solve it?

HelloI would like to get the absolute dynamic media/scene7 url of assets and its renditions in AEM Java.My setup is like this, on AEM cloud author the image is uploaded and is then published to dynamic media scene 7. No publisher instance is there. How do I get the scene7 urls of assets and its renditions?

Hi All   What are the possible reasons Akamai redirects every request to the dispatcher for secured and non-secured content, and how does the dispatcher serve that content?     Thanks KNan

I am trying to connect to kafka using props.put(CommonClientConfigs.SECURITY_PROTOCOL_CONFIG, "SASL_SSL");props.put(SaslConfigs.SASL_MECHANISM, "PLAIN");props.put(SaslConfigs.SASL_JAAS_CONFIG, "org.apache.kafka.common.security.plain.PlainLoginModule required   username=‘x’  password=‘x’;”); When i am trying to run my project i see this in the logs java.security.PrivilegedActionException: javax.security.auth.login.LoginException: java.lang.AssertionError: No bundle exists to create LoginModule from org.apache.kafka.common.security.plain.PlainLoginModuleat org.apache.felix.jaas.internal.BundleLoginModuleCreator.newInstance(BundleLoginModuleCreator.java:59)at org.apache.felix.jaas.internal.ConfigLoginModuleProvider.createLoginModule(ConfigLoginModuleProvider.java:80)at org.apache.felix.jaas.boot.ProxyLoginModule.initialize(ProxyLoginModule.java:46)at sun.reflect.GeneratedMethodAccessor27.invoke(Unknown Source)at sun.reflect.DelegatingMethodAccessorImpl.invoke(Dele

Hi Team, I have a content fragment with master, fr variations. When users publish french version of page then I should replicate only fr variation but not master.Currently I am only replicating only fr variation when users publish french page but I have a problem here. 2409422321533 is my page number. It has 2 variations master and fr. If I only replicate fr variation node then properties on parent node(data node) are not transferring to publisher instance via AEM's replication. When we are querying GraphQL then it will need cq:model for sure but when I replicate this cq:model is not transferring to publisher. If I publish data node the master will go to publisher which I don't want. Is there any way I can achieve If I replicate fr node then it's parent properties should also go to the publisher. ThanksRamesh 

AEMaaCS OOTB Fastly CDN is Finally Good Enoughby @daniel-strmecki OverviewAs I've been working with AEMaaCS since its early days, the OOTB Adobe-managed Fastly CDN option used to be very limited for customization. Therefore, we've seen many enterprise customers deciding on the bring-your-own CDN option to accommodate specific requirements. This option is still valid, but it means clients need to pay for two CDNs. Adobe-managed Fastly CDN comes OTTB with AEMaaCS and we cannot remove it from the architecture. We can only instruct it not to cache any content and pass it to the BYO CDN. However, Adobe has improved the OOTB CDN offering a lot since then. In this article, I will demonstrate what customization options are now available and where we still might find some gaps.Key points:Adobe-managed certificates (DV) offer simple domain ownership validation without the need for extensive organizational verificationAdobe-managed CDN can be configured using a cnd.yaml file that c

 Don’t use OSGi configs in AEMaaCS  by Achim KochOverviewOver the years, AEM  developers were trained to use runmode  dependent OSGi  configurations for their services. In AEM as a Cloud Service AEMaaCS  there are more options and the paradigms have shifted a little. Follow my latest essay on when to use OSGi configs, and when the code can be made much cleaner with more simple methods.Read the full article here:  https://medium.com/@achimkoch/dont-use-osgi-configs-in-aemaacs-18ed91053dee  Q&APlease use this thread to ask questions relating to this article

Edge Delivery Performance Demystifiedby @daniel-strmecki OverviewWe've seen websites running on Adobe Edge Delivery Services (EDS) achieving record Lighthouse scores for performance. But, what is the secret behind Adobe's approach towards such great front-end performance? What is the technology behind it and what are the consequences of implementing it on your website? Everyone experienced with different web technologies knows that all architectural decisions have their ups and downs. Usually, there is no one-size-fits-all approach. Therefore, in this article we'll dig into the details.Key points:With EDS, there are no HTML or HTL component definitions, the HTML code is extracted from the content, like a Word documentThe layered rendering approach has a very concrete purpose, to achieve maximum mobile performance / Lighthouse scoreTo keep the performance scores high, teams should develop custom blocks without introducing heavy JavaScript frameworksThis might not be ideal for front

Hello Everyone!We have a requirement to reactivate/reload the specific OSGi service programmatically based on changes on certain nodes (especially, content fragment data). Is it possible to programmatically reactive/reload the specific OSGi service? If so, sharing any example or sample code snippet would be appreciated.We are thinking of writing Listener to listen to changes in content fragments data and in that listener, we are going to programmatically restart/reactivate/reload the specific OSGi service. I am open to any other suggestions as well.Just FYI, we have OSGi service registered with "immediate=true" so it's already active after the bundle is installed.Thank you in advance.