authentication

FB permissions, fb tags vs. javascript

Is my understanding correct, that in FaceBook development I can request application permissions (for user data, posting to his wall etc.) in 2 ways by using some static permission-requesting fb-tags in html code or by using facebook JavaScript libraries/objects for dealing with permissions? If so, are these ways serving the same purp...

How should I do authentication in a ASP.Net MVC site?

I have a site which has an area that requires authentication. Right now I use the roles attribute on all the controllers in that area, and I run a query to retrieve that users ID, and all their settings. It seems like a code or design smell to me that I am retrieving the userid and settings each time a controller in that area loads up? ...

Twitter rss feed 401 - unauthorisation

Hey. I have a public twitter account and this is the rss feed for it: http://twitter.com/statuses/friends_timeline/150784631.rss The problem is, im getting an http 401 whenever im trying to access it. Can anybody explain how to stop this - and get it to work either with authentication or without! Cheers ...

CAS authentication and redirects with jQuery AJAX

I've got an HTML page that needs to make requests to a CAS-protected (Central Authentication Service) web service using the jQuery AJAX functions. I've got the following code: $.ajax({ type: "GET", url: request, dataType: "json", complete: function(xmlHttp) { console.log(xmlHttp); alert(xmlHttp.status); ...

Voice identification for web apps

What libraries / projects is to identify / authenticating to web apps using the voice? ...

Single SignOn - Best practice

Hi Guys, I need to build a scalable single sign-on mechanism for multiple sites. Scenario: Central web application to register/manage account (Server in Europe) Several web applications that need to authenticate against my user database (Servers in US/Europe/Pacific region) I am using MySQL as database backend. The options I came up ...

Rails 2.x http basic authentication

I'm trying to get basic http authentication working on my Rails app. I'm offering a simple REST interface served by a Rails server, only xml/json output. Every method needs authentication, so I put the authenticate filter in ApplicationController: class ApplicationController < ActionController::Base helper :all # include all helpers,...

Forms Authentication works on dev server but not production server (same SQL db)

Hi, I have the same problem as a previously solved question however, this solution did not help me. I have posted the previous question and answer below: http://stackoverflow.com/questions/2215963/forms-authentication-works-on-dev-server-but-not-production-server-same-sql-db/2963985#2963985 Question: I've never had this problem ...

Authentication with wget

I am currently accepting the parameters login and password in my servlet, but logs are storing this info when using wget (as long as it is GET method, and apache is in the middle) Instead of this I want to enhance my servlet's authentication accepting: wget --http-user=login --http-password=password http://myhost/myServlet How can I ...

How do you prevent brute force attacks on RESTful data services

Hi, I'm about to implement an RESTful API to our website (based on WCF data services, but that probably does not matter). All data offered via this API belongs to certain users of my server, so I need to make sure only those users have access to my resources. For this reason, all requests have to be performed with a login/password com...

How can I make a security token automatically expire in a passive STS setup?

I have a passive STS set up for a new application I'm working on. I've noticed that when a user's session expires, the user is still authenticated. I would have thought that when the session expires, the user would no longer be authenticated. My boss discussed this with me as I am currently charged with setting up the authentication. ...

NTLM authentication in Python

I'm trying to implement NTLM authentication on IIS (Windows Server 2003) from Windows 7 with python. LAN Manager Authentication Level: Send NTLM response only. Client machine and server are in the same domain. Domain controller (AD) is on another server (also running Windows Server 2003). I receive 401.1 - Unauthorized: Access is denied...

WCF Rest service authentication

Hi, I am trying to write my first WCF Rest service following http://msdn.microsoft.com/en-us/library/ee391967%28v=MSDN.10%29.aspx Sometimes when I go to websites they ask a user to enter a username and password... I just wanted to know when Im testing my service with Http Get options in a browser, Is there a way so that the browser a...

How to implement Google OpenID authentication in PHP & Test on Localhost

Hi, I am new to OpenID, and want to implement Google OpenID authentication on my website. I could not found any example. Can anyone suggest me some good tutorials (step by step) or any working example with code to implement Googl OpenID authentication using PHP. All helps are appreciated. Thanks, Navin ...

How to implement authentication mechanism in Java EE 6

I'm trying to learn Java EE 6 and i'm just wondering how to implement authentication mechanism in Java EE 6. Here is the Java EE 6 authentiction example: public void login() { if (account.authenticate(name, password) == null) { message = "Invalid user name or password!"; } else { message = " Login successfu...

Cakephp Auth with multiple "Users" tables

Hi, I would like to know how to deal with only ONE authentification process and "users" in multiple tables. I have 4 Users table: users, admins, artists, teamadmins which all have specific fields, but I would like all of these users to be able to connect via only one form on the homepage, and being redirected after that to their specific...

Authenticating a mobile app against a WCF service?

We are working with a vendor to develop a mobile app and plan on using WCF services to handle operations. What are some types of authentication I can use with a WCF service? Would we send a user name and password through the SOAP header? How can we accomplish this securely? Also, this will be authenticated against our .NET membership da...

Django User "per project" group assignation

Hi, Here's my problem : my site has users, which can create projects, and access other user's projects. Each project can assign different rights to users. So, i could have Project A : user "John" is in group "manager" , and Project "B" user "John" is in group "worker". How could I use the Django User authentication model to do that ? ...

Restricting access to records. Is claim-based permissions a good idea.

in .net Claim-based identity framework If i wanted to restrict users to do an operation (view or edit) on let's say an account, a particular account #123456.(i am talking about business entity, like a bank account.) Is it a good idea to create a claim for each account they can view or edit? Any disadvantages of having a lot of claims ...

Creating custom IP-STS for sharepoint foundation 2010 without ADFS

I plan to create very simple custom IP-STS for SharePoint foundation 2010 without ADFS server so anyone can integrate Windows Live ID to SharePoint foundation 2010 simply without ADFS, I can't use ADFS server because it could not install on Windows Web Server 2008 (Web Edition), also I found many article use LDAP provider but it does not...