authentication

How to implement a system involving multiple methods of authentication?

I'm starting a new project that depends on social networking platforms very deeply, so I have decided to avoid the normal registration-login mechanism and allow the users to create accounts by using Oauth or similar methods provided by services like Facebook and Twitter. I'm clear on how to implement them but I'm not clear on how my dat...

final static variables are reset in Google App Engine Cloud

I have a GWT+GAE web app with several service and modules. I am using the module functionlity of mvp4g. All of my services extends: public abstract class BaseServiceImpl extends RemoteServiceServlet { protected final static Map USERS = new HashMap(); I use USERS to store my current active user sessions. Once I user authenticates him...

Email as username in Django

Okay, this one is pretty obvious to everyone who use Django and frequently asked by newbies, but I'd like to make it clear and discuss if there are any other ways to do it. The most widespread and convenient approach now is to store email in username field as Django 1.2 allows "@", "_" and "-" characters, but this way has following issue...

PHP Swift mailer: Failed to authenticate on SMTP using 2 possible authenticators

When I send an email with the PHP Swift mailer to this server: smtp.exchange.example.com like this: // Load transport $this->transport = Swift_SmtpTransport::newInstance( self::$config->hostname, self::$config->port ) ->setUsername(self::$config->username) ->setPassword(self::$config->password); // Load...

Application_OnAuthenticateRequest executes for image requests

I'm using Application_OnAuthenticateRequest in Global.asax to assign a custom principal to HttpContext.Current.User and System.Threading.Thread.CurrentPrincipal. In testing, I noticed that this code executes multiple times for a single page request. By looking at the HttpContext.Current.Request.Url I determined that this code is executi...

When I run code to post blog i get error: Proxy Authentication required

i am writing code in vb to post blog to wordpress. here is the code Imports CookComputing.XmlRpc Public Structure blogInfo Public title As String Public description As String End Structure Public Class Form1 Public Interface IgetCatList <CookComputing.XmlRpc.XmlRpcMethod("metaWeblog.newPost")> _ Function...

facebook session trouble

I have a facebook iframe facebook app. At the top of each page I run the authentication script from the php example included. For some reason however if I login to one facebook account, access my application, log out of facebook and into a new account when I visit the application I am still authenticated as the first user. How come the ...

How can I do two-stage authentication to an Active Directory server in Python?

I'm running Python 2.6 on a FreeBSD machine, and I would like to do (and I don't know the correct term for this) two-stage authentication against an active directory. Basically, the process to log in user 'myuserid' is: Bind to the AD LDAP server using a system account created for this purpose (call it DOMAIN\gatekeeper) Verify myuser...

Store data from filled form

Using restful_authentication and before_filter :login_required, :only=> [:create] on controller: Is it possible to store data from form, and after user logged in, continue with 'create'? So i mean: User logged off and he see Somecontroller#new Then he fill in the form Then he press "Save" As we have login_required, user now has ...

IIS 7.5 and client authentication

I have to do a proof of concept and thus far I'm finding primarily old articles that reference IIS6 which isn't helping. In short I have the following requirements. I need to secure one file/page and this one file/page only using a client certificate. The rest of the site does need to continue operating under SSL but doesn't require cl...

Force silverlight to authenticate as current user by default

Is it possible to force a silverlight browser application to use the current authenticated user by default? I want to avoid the first request where the IIS responds with 401.2. So, instead of having two requests where only the second is useful, I want to have only one request. I see this happening both with NTLM and Kerberos. Regards, ...

Difference between client (java standalone client)application authentication and user authentication

Hi, In case of webapplicaiton I can understand that there is no difference between the client authentication and user authenticaiton; Ignoring XSS and other exploits the web client is generated by the server/servlet. But suppose you have a Java client application talking to the Java Server application; The server has a certificate assoc...

Apache Wicket - wicket-auth-sessions - Prevent multiple signins

Hello, I'm using wicket-auth-roles, and in particular 'AuthenticatedWebApplication' to secure pages in my wicket application. I would like to disallow users from signing in from multiple locations with the same login. Currently users seem able to log into the same user from two different machines. I'm sure it's as easy as invalidating ...

Generating a new cookie and token

Im trying to design a login system, which when the user is logged will provide a token at the end of each URL, this will have to match the token stored in the cookie, once this is matched the value of the cookie is changed to the value of the current session. if (isset($_COOKIE['user_token']) && $_SESSION['user_token']) { if (isset(...

Hash Passwords php

I have a very basic logon system, that authenticates users by the means of a user table in a mysql database with php. can someone explain what the point of hashing passwords it, how to do it with php, and what is actually stored in the database. Thanks ...

SOAP wev service on android

Hi. I am am trying to connect to a SOAP web service using ksoap2 library. I have read a bunch of docs about it, but i am stuck as my request is not an ordinary one. I need to specify some headers prior to sending the request. when is use a soap client to test the webservice i also need to put this in the soap enveope header section: ...

Windows Live Web Authentication on Google App Engine (GAE) using Python

I'm struggling to get Windows Live Web Authentication running on Google App Engine (GAE) using Python, as I'm quite new to the language. However there are lots of examples for Facebook and Twitter, I was wondering if anyone had come up with a solution for Windows Live yet? ...

Custom Login Function with CakePHP's Auth Component

I need to know how to customize the login function that I am using with the Auth Component. Currently, it is blank and being handled automatically by the component. I need to add some conditions in it that which I want to execute before login happens. ...

Dynamic routes and Membership providers

Using the a Membership provider and the MVC framework, is it possible that routes are dynamically changed so that a already logged in user goes to his own page, rather than the default. At the moment I go to the default. If the user is already logged in or not, there I do a redirect to their own page. This can't be the correct way! Can ...

asp.net web application fails to recognize user identity

We have a web application and it uses System.Web.UI.Page.User.Identity to determine who the current user is. We are experiencing an intermittent problem, where a user is not recognized (their identity is blank or empty). Anonymous authentication is disabled so I don't see how they can fully access the web application without it recognizi...