authentication

UIWebView does not persist authentication on iOS3.2/iOS4

I made an application that uses UIWebView to display a site that uses basic authentication. It stopped displaying the content since iOS3.2 (on both iPhone and iPad). My approach for authenticating users are: create a NSURLConnection implement didReceiveAuthenticationChallenge to provide the credential implement didReceiveResponse to r...

LDAP vs SQL database for user authentication/user data storage

Hello SO, I am starting to use cakePHP for the first time with a hobby project. It looks like cakePHP supports LDAP easily enough as well as any DB. If the project goes well, I am thinking of letting the general public use the site, which means that there will (potentially) be a lot of users (a lot is relative, I guess, I'd be shocked...

Authentication and Authorization Framework for Java Web-Application

H folks, I am programming a Web-Application with JEE, JSF and Hibernate. I do not use Spring or EJB! Now I am at the point where to implement authentication and authorization. I need to access an Active Directory or LDAP. And I want to implement my own roles, that are not retrieved from the AD/LDAP. My Question is: What's the easiest ...

Adding authentication to a Silverlight 4 RIA services application (not the business template)

I started a Silverlight 4 RIA Services application with the Navigation Application template, instead of the Business Application template. Now I want to add authentication to that application (to protect a page from unauthenticated users) I've added an AuthenticationService to the project, but I'm not sure what the steps are now to get...

detect that an email is sent to a mailing-list

My application sends mails containing an authentication token. The user which receives the mail clicks on a link and is directed to a webpage. The app recognizes him. The problem is that sometimes the mail is sent to a mailing list instead of a personal address. Then several people come on the page and override each others' actions. Th...

Module "mymodule" does not define a "MyBackend" authentication backend

I'm trying to use a custom authentication backend for a Django project I'm working on. My backend is based on the LDAPBackend found in the article LDAP Authentication in Django with Backends. I'm getting the floowing error when I attempt to log in: ImproperlyConfigured at /admin/ Module "challenge.backends" does not define a "LDAPBack...

python http request with token

hi, how and with which python library is it possible to make an httprequest (https) with a user:password or a token? basically the equivalent to curl -u user:pwd https://www.mysite.com/ thank you ...

using both basic and Integrated authentication

We would like to use Integrated Windows Authentication if a user accesses our SharePoint site from within our organization, and Basic Authentication (using SSL) when someone tries to authenticate from outside our organization. Reading, it seems IE will try Windows Auth no matter what and ignore Basic Auth from outside our organization. ...

How should I handle authentication in my REST API?

I am new to this but I will try my best to explain what I am trying to do. I have a catalog of products and various private information that my users want to be able to access via their website. For example: User-a has an e-commerce site and they want to sell my merchandise. They will be able to access a certain products details via...

Safely Storing Biometric Information for Comparison

I'm using a biometric fingerprint scanner with an SDK that allows me to compare two images of a fingerprint. My question is if I wanted to locally store one of the images for later comparison what is the safest way to do this? My line of thinking is that when doing the same thing with passwords, an easy safe way would be to hash the or...

How to end the session and make sure the logged out process is correct?

Hi, I new to .aspx and now the thing is since i am doing a web enabled project, I have this login from an user. I drag dropped the login template and then used the Session["Authentication"] = username.Tostring(); to store the current logged user's info and so. Now i even used a hyperlink "Logout" at the top right corner and then made...

Protect files in directory using authentication script in php/apache

I'm looking for a way to tell Apache that if there is a request for a file from a certain directory it should first run a php script to verify if the user is logged in. I know I could put the directory outside of the docroot and let a php script handle the authentication and file downloads, but because these are flash files that try to o...

LDAP for Application Access Control, how much should it control?

A precursor: I've worked now in two enviroments with conflicting principals on this. I am outlining the competing ideas and would like to know which is 'correct' given the scenario described. Scenario: Multiple applications exist on our intranet. We are implementing OpenSSO with LDAP as our authentication control and user directory. The...

FireFox randomly breaks login?

Update: I finished my app using NerdDinner 1.0 as a starting point. NerdDinner 2.0 had a more robust AccountController so I line for line did a complete replace of my AccountController v1. It was at this point that I started having login issues with FireFox (confirmed with a revision rollback). There are several differences on the whole ...

Is all I need the "identity url"? - OpenID

Hi folks, I'm just wondering if all I need is the identity url in order to to theoretically attach an OpenID account to a user's account. I have identity urls that look like the following: https://www.google.com/accounts/o8/id?id=YGnyuGHMUmhUI98nuhUMhu98nuN. Is this different between OpenID 1.0 and 2.0? Just in case someone asks: I'm...

URLDownloadToFile and Authentication

Hi I'm working on some old ATL OCX, that is used as "download manager". It downloads files using URLDownloadToFile API. Previously, it was hosted as ActiveX on web page so in case the server required authentication it was done by IE. Now it is part of executable, so it should take care of authentication. Let say user provided username...

Where do I get my WCF service to handle X509 certificates? C#.NET

Hello all I've knocked up a WCFservice and a client. I also have a class to validated X509 certificates. Here is a snippet of the Web.config file of the service: <behavior name="HelloWorldWFC2.Service1Behavior"> <serviceCredentials> <serviceCertificate findValue="Service" x509FindType="FindBySubjectName" storeLocation=...

Desktop Flickrj Java Authentication Flow

I'm using the Flickrj API to log into flickr. For READ only access its fine, but I can't seem to correctly auth when i need WRITE access to add tags to photos. As i understand the basic auth flow Get a frob Pass that frob requesting WRITE access, this returns a URL. Call the URL to recieve a flickr token Use the token in all subsequen...

Pear Authentication

Has anyone ever tried to use SHA-256 or SHA-512 with PEAR AUTH? MD5 works perfectly however, nothing happens when you set the cryptType to 'cryptType' => 'sha256' The page will just reload. I'm using MDB2 With this. Code is here: http://pastie.org/1065896 ...

Setup mecurial to only work with users already authenticated with my server?

I have a mecurial server setup and would like to use it for source control over apache. The setup i followed, however, requires that I have a .htpasswd which it uses to authenticate mecurial users. Is it possible to have this authenticated list be the people who are already users on the server so they don't have to create new id's and p...