authentication

Joomla Authentication

Okay I'm a little confused on how to do this due to the fact that I'm new to Joomla. I have a site where users need to be logged in to view certain articles. I want restricted articles to basically pick up weather or not the user is logged in, if so proceed as normal, else display a login/registration form. I looked at the plugins sec...

Mutual authentication between asp.net and WAS application (Java)

I'm building a .net application that needs to consume a WAS (Java) based web service using SSL and mutual authentication. Any pointers on how to go about doing this? I know that somehow I need to create private and public certificates for both the server and client and that I need to install the public certificate for the server somewh...

Facebook authentication for Django projects

Hello, world! Which implementation is most correct, modern and easiest in your opinion: http://github.com/dickeytk/django_facebook_oauth or http://github.com/teebes/django-facebookconnect/ or http://github.com/tschellenbach/Django-facebook ? Thanks! ...

Django auth.User

Hi, I'm developing web page with many type of users, each with different profiles properties. I would like to use built in auth system but: a) I want to use django-registration. b) I can point User.get_profile to only one profile model. How to accomplish that in nice fashion? ...

Java and system user authentication

I'm in the process of writing a server application that mainly allows people to submit jobs to a DRM system (e.g. TORQUE) over RMI. The application needs to run as root so that it can submit proxy jobs (where a job is run as a user other than the user who submits it), however this obviously isn't secure - the user name is simply a string...

How does one implement Google Federated Login using dotnetopenauth

Hi all, From what I read, Google Federated Login is OpenID and OAuth together. I've read the samples included with dotnetopenauth (theres a Gmail Contacts one in there) and sort of get it. What is freaking me out, then, is if Google Federated Login is a combination of these two protocols, how on earth am I supposed to implement it when...

Django / Python, how to check if user is logged in (how to properly use: user.is_authenticated )?

I am looking over: http://docs.djangoproject.com/en/1.2/topics/auth/#django.contrib.auth.models.User but just can't seem to figure out how to do this as its not working. I need to check if the current site user is logged in (authenticated), and am trying: request.user.is_authenticated despite being sure that the user is logged in, it ...

How can I create a secured "remember me" system using PHP?

I have a login system. How can I implement a secure remember me system using cookies. What value should I have to store in cookie username and password, but how I can secure it? ...

Creating an Authentication framework for an API

I am looking into creating an Public API so that we can open up some functions to our clients to develop against. I am sure that there are some good frameworks out there, I am just not sure where to start looking. There are 2 things that this framework would need to achieve. The Ability to approve/deny developers against the API. Th...

Is this kind of hashed verification safe?

Dear SO-ers! The question I'm about to ask is just because I'm curious. I think I'm doing the right thing, but I want to make sure it actually is the right thing. It's about hashing. The website I am currently building features several Ajax-ed components. First of all, users that are not logged in cannot use these components. Second, u...

Has anyone used Janrain's auth on iPhone?

We use Janrain's authentication on our site for our users, and we are now working on an iPhone app for the service as well which will require us to be able to be authenticated so that we can talk to the servers. Has anyone actually used janrain's iPhone libraries successfully on the iPhone? I'm having a lot of different troubles with it,...

CakePHP - Auth component not populating aros table

Hi I'm following the Auth tutorial and in this stage http://book.cakephp.org/view/1547/Acts-As-a-Requester aros table is not populated as stated. I did not insert records into db directly, I used baked forms as mentioned. ...

Is there an alternative to Auth / Acl component for CakePHP?

It's just too complicated to use. ...

Security question: authentication vs authorization ?

Let's assume I must have user's sensitive data that was optionally encoded on the client side. Encryption (optional) should be done with user's passphrase. User login (optional) should be done with user's password. Notes: plain-text password is not stored on the server or transfered over the network. My options and their drawbacks:...

Allow IP address without authentication

I have set up a site that is currently work in progress. I'm using an external SMS gateway that needs access to a script on my server. However, I have set up a basic username and password authentication for regular users, but the SMS gateway can't get through that. How can I allow a single IP to pass through the authentication without a...

Authentication Providers 'greyed out' in sharepoint 2010 (enable anonymous access)

I am trying to config a sharepoint 2010 site for anonymous access. The tutorials I am following are: http://live.visitmix.com/Videos http://blog.drisgill.com/2009/11/sp2010-branding-tip-9-turn-on-anonymous.html http://www.topsharepoint.com/enable-anonymous-access-in-sharepoint-2010 And a few youtube videos. I am stuck fast in a cert...

PHP | Fotolia API and "Invalid session ID"

Hi, I am creating a class in PHP to work with Fotolia API. In some cases there is a need to authenticate the request. I have created a method which is listed below : private function prepareContext( $request ) { $context = array(); $context['method'] = 'POST'; $context['content'] = $request; $context['header'] = "Conten...

netword authentication method

If I was running a server that allowed certain user's on my LAN to access the WAN. How can I reliably authenticate these users? I could allow by checking MAC/IP adresses, but those details can be spoofed, right.. Ideally, I would like the user to: 1. connect to the LAN via DHCP 2. be re-directed to the server's login page when t...

Sharing authentication between WPF and Silverlight

Hello. I'm trying to integrate authentication between WPF application and Silverlight application. The users will login in the WPF app first, and they should be authenticated when they run the silverlight app from the browser. The silverlight app is using forms authentication.(through WCF RIA Service) The main application is Silverligh...

Use authlogic to find the User record based on an associated record

Typically, with Authlogic, you would authenticate with some unique identifier (e.g. email or username) and a password. Authlogic does this by first finding the record by the identifier (User.find_by_email_address(email) or similar), then calling then .authenticate method on the returned object, which checks the password against the recor...