authentication

Best Learning Resource for OAuth

I have to use OAuth for my Android client and I have found that the learning resources are pretty rare or inadequate for this technology. Does anybody know a good book/tutorial/online resource to learn OAuth? Thank you. ...

Implement JBoss WS-Security Username Token Profile authentication

I implemented a web service with JAX-WS, and my service client is implemented with JAX-WS too, and the client can talk to service with WS-Security username token profile authentication. Now I want to deploy this service to JBoss 4.2.3 and want to replace the custom authentication with JEE container authentication. I read some documents ...

jboss authenticate return http code 408

I am trying to authenticate into JBoss, and I got HTTP Status 408 - The time allowed for the login process has been exceeded.(full error message below) this happens when I try to login using http://dnsname:8080/authenticate if I replace this with just plain localhost ie http://localhost:8080/authenticate then everything works fine. W...

Help! Why do my IE users get randomly logged off?

ASP.NET MVC 2.0, here's my auth code: [AcceptVerbs(HttpVerbs.Post)] public ActionResult Login(string username, string password, string returnUrl) { if (ModelState.IsValid) { // Attempt to login var loginSuccessful = provider.ValidateUser(username, password); if (loginSuccessful) { FormsAuthentica...

How would Google Multiple Accounts Sign-in be implemented ?

Google published that they are testing a feature that allows you to sign in simultaneously to multiple Google accounts in the same browser. Any idea how would that be implemented ? ...

PHP: SSL HTTP Authentication?

I have a php page in which I have the following code to validate the user using HTTP authentication, this code works fine for http:// url's but when I use the same page with https:// then it didn't ask for username and password. //authentication settings define('USERNAME', 'prashant'); define('PASSWORD', 'password'); //Validating if (!...

How to authenticate to the server over a secure connection to send mail from a script?

My current script uses this simple command: mail -s "$my_msg" username\@mycompany.com </dev/null When changing it to use a mailing list rather than the hardcoded username: mail -s "$my_msg" mailing_list_1\@groups.mycompany.com </dev/null It produces: 550 Unrouteable address I need to be able to authenticate to the server over...

Using the Facebook Graph API, how can I get the contents of a page?

For example, here's a 'page': http://www.facebook.com/facebook That page has an RSS feed (which I'd like to use, ideally), but a) it browser-sniffs meaning I need to fake the user-agent from a script to fetch it - and that feels really brittle b) the quality of the data returned is really poor. Can I use the graph api to fetch the sam...

php curl - posting asp.net viewstate value

Hi guys. I have the following code to login into an external site application (asp.net app) from a local site login form (written in php): <?php $curl_connection = curl_init('www.external.com/login.aspx'); curl_setopt($curl_connection, CURLOPT_CONNECTTIMEOUT, 30); curl_setopt($curl_connection, CURLOPT_USERAGENT, "Mozilla/4.0 (compatib...

Account exception about Calendar widget of Android sdk 2.1

I'm running the Calendar widget of the Android SDK2.1 on my device, and get authentication exception. It sounds that something is wrong with the accountmanager. How could I fixed that problem. Thanks! Here is the log: root@jacky-desktop:~# I/ActivityManager( 753): Starting activity: Intent { act=android.intent.action.MAIN cat=[android...

Is there a reasonably safe way of authenticate a homepage using javascript?

Hey! I am very new at javascripting and I would like to know if there is any way of authenticating a homepage using javascript? I do know a couple of ways but they are extremly easy to "hack" because the username and passwords are stored in the script itself - as arrays. Do you guys know any good ways of authenticating just a single su...

Dropbox like remote authentication

I am trying to write a dropbox like system with a linux server and client. So far my java (language chosen randomly) client basically makes calls to unison to sync over ssh. At this point I would like to add a user account system so multiple people can use the same server, like dropbox. The problem is I am not sure how to support multip...

Authlogic and OpenID registration and login in one action

I was playing with Rayan Bates http://railscasts.com/episodes/170-openid-with-authlogic sources as the basis. So I created few icons for OpenID providers, like Google, Yandex, OpenID, and user have to choose which one to use (similar like here on stackoverflow). So everything is fine. Now I decide to make only one click for login or reg...

Find Out if ASP.NET Request Came From Local Machine

Hello, I've built an ASP.NET application that's using Forms Authentication. In our hosting account control panel, I set up an automated task that requests a web page once per week. When the page loads, a number of emails are sent out. I'd just like to know if there's any way to determine in the code-behind if the request is coming from...

Authentication and authorisation in an n-tiered architecture

Hi, I need to be able to tighten my business layer - access to particular data. The UI can make a call to the business layer and receive a userdetail. The UI can then call .Save() on a user and the business layer will call the data access layer to save the user. Although, the problem here is that I don't just want any user to be able t...

How to make the ActiveDirectoryMembershipProvider accept an empty password?

We are developing a web application that uses forms authentication and the ActiveDirectoryMembershipProvider to authenticate users against the Active Directory. We soon found out that the provider does not allow a blank/empty password to be specified, even though this is perfectly legal in the Active Directory (provided a preventative pa...

Displaying same content to different users who may be seeing different master pages (ASP.net)

I have some pages that have content that is relevant to both logged in users and non logged in users. For example, pages with contact information, privacy policies, etc. All the pages have your typical navigation menu but the thing is logged in users normally see a different navigation menu bar than non logged in users. What is the best...

Verifying Mercurial Changesets are from who they say they're from

I'm investigating using Mercurial in a corporate environment. The plan is to use central repositories hosted by a webserver (IIS) which developers will push to once they've tested changes locally or within their teams. I have IIS configured to authenticate users against Active Directory, but there seems to be a hole in that while I can...

Run managed code on secure desktop

I am working on creating an application which must interact with the user on the secure desktop (i.e. locked computer screen), but does not specifically provide authentication. From my research, it seems that the only way to get code running on the secure desktop is to use the Credentials Provider API. However, you can only write a crede...

How to store custom information in SecurityContext of spring-security?

In my application I'm using LDAP authentication. But i'm also have 2 remote services which requires authentication via method login(username, password). The method returns security token which makes me able to invoke another methods, i.e. I should pass security token to service methods as first argument. So I'd like to get these security...