authentication

How should IIS7 authentication work with the URL rewrite module?

I am attempting to set up Url Rewriting in IIS7 using its Url Rewrite module, but have been unable to find any documentation on how this interacts with the authentication module (excepting that http://msdn.microsoft.com/en-us/library/ms972974.aspx tells me I can't use digest authentication). When setting authentication (for example, win...

Flash, Facebook & permissions - JS, PHP or AS3 SDK

Setting out to develop a Flash quiz application for Facebook, which SDK (JS/PHP/AS3) and Facebook API (Graph/old rest) should I choose? Please also answer how the following would be accomplished using the preferred solution above and why this simplifies the development of the app: Authenticating user on app page Requesting permission ...

Can a FormsAuthenticationTicket survive an app pool recycle?

I am looking for a solution where we can make a FormsAuthenticationTicket (and corresponding cookie) with a very long expiration period. This is possible by setting a high value or using a sliding expiration, but when the application pool of the website is recycled, the FormsAuthenticationTicket disappears (I think), the cookie gets inva...

Single sign on with SQL Server? Security and performance

I'm working on a website (asp.net c# with SQL Server) and the client is asking for SSO solution. I'm looking to use one shortest implementation where we can create sub-domains for different modules and install/deploy on same or different servers but all of these module/application uses same SQL Server and session is also maintained and s...

Why does Win32 API function CredEnumerate() return ERROR_NOT_FOUND if I'm impersonated?

I've written some sample code which when I call from the windows command prompt under the context of a normal user account, dump's all the user's saved credentials using CredEnumerate(). However, I really want to be able to do this from SYSTEM user context so I've tested my program from a SYSTEM cmd prompt. When I running my program a...

Client/Server Authentication with SSLStream

Hello, I have a client and server application which use SSLStream to communicate over port 80. Both the client and the server are running as Windows Services. Everything works in my test environment (my development computer, under the OS Windows 7 Ultimate). My problem is that when I go to deploy the client and server application to ...

How to have a native android app authenticate with web backend?

I'm working on developing a native android application to retrieve data for a user from my company's website. Because the data is specific to the user, I need to authenticate with our web server, but I'm unsure of the best way to go about this. I've been reading about REST/SOAP/HTML form auth, but I can't really find any definite 'this...

authentication mode="Forms" Error

Hello, I've made an ASP.net application in Visual Studio. When it was ready I did "Publish Website". I placed the created folder on my website. When I go to the application on my site, I get the following error: Server Error in '/' Application. Configuration Error Description: An error occurred during the processing of a configur...

Anyone using mongoengine with Django auth

I am quite new to both django and mongoengine. Is there any project I can refer to see basic implementation of user authentication and authorization. ...

Is there any easy way to provide a number of 3rd party login options

Stackoverflow lets you login with many of your existing logins. Is there an easy way to do this, or does this involve reading the docs for each of these services and integrating ones own website with the way they operate. They may well be very similar and therefore not much trouble to do, but if there is something that wraps all of thes...

ASP.NET Forms Authentication prevents loading javascript on Login.aspx

Hi, All ;) I am experiencing problems with Forms Authentication. When I try to load my Login.aspx page neither javascript nor stylesheets do not load. Here is part of my web.config file <authentication mode="Forms"> <forms loginUrl="Login.aspx" timeout="30" name=".ASPXAUTH" p...

Use mixed authentication with Asp.Net MVC (Forms, FB connect, twitter, openId)

Hi, I'm creating a new site and I want the users to be able to use several ways to sign in, basically the users should be able to create a new user on my site OR use Facebook connect OR use Twitter's account to log into the site. I have seen several tutorials on using one of these methods, what I want to know is what do you think is th...

HTTP authentication and sessions

Hi, I've been trying to figure out how to do a HTTP authentication and then use the session to display pages in a webview in my android app. Could someone please provide som guidance (I would very much appretiate some sample code if possible). I use Zend ACL on the server side. Thanks in advance. ...

InvalidAuthenticityToken from rails for POST request from openlaszlo app.

InvalidAuthenticityToken from rails for POST request Hi All I have a rails server running to which I make a POST request. The dataset is defined as Now per rails documentation in order to make a POST a request I need to set the add "authenticity_token" to the query string. So if for example the authenticity_token is "xxxxxxx", the fin...

SSO with OpenID

I trying to find the way to implement the full blown SSO using the OpenID so that user does not need to enter anything on the new site within the SSO. I removed all cookies and started experimenting. Logged in on stackoverflow.com Looked at Fiddler and seen that stackauth.com is being contacted started searching to see what is stackau...

Kohana 3 ORM Auth Module: how do i get a users role from the user object?

Hey all, I'm having some trouble wrapping my head around the user roles situation. i do understand the way they get created on inserting a new user, but i was wondering if there is a good way to get a users role into the user object, so that i can check for it in the controller. thanks :) t ...

PHP authentication + mod_rewrite

I have a PHP script that tests is the user is logged in, for every page he accesses in a certain subdirectory. If he's logged in, he gets the page, otherwise he gets redirected to a login page. Instead of including this into every file (not possible since some are binary), I set up .htaccess like this RewriteEngine On RewriteCond %{REQ...

WCF Data Services with Integrated Authentication issue

I have a web project that has Anonymous access and Integrated Windows authentication enabled. I built a WCF Data Service and since it allows only one authentication, I enabled Integrated authentication on the service. I am able to view the service in browser. However when I try to query the service for any Entity, it gives me Forbidden e...

sharing authentication across multiple plugins in Grails

I have modularized a large Grails project into several plugins and want to share access to the spring security plugin to manage authentication across my project - is there an easy way to do this? I'm not sure how to share access to core project plugins from sub plugins ...

how to use the windows login credentials for proxy authentication using C#

Is it possbile to use the windows login credential for proxy authentication using C#. I have a facebook application, which calls the facebook methods. During every facebook call, it gives an error "407: proxy authentication required" The following code will allow the user to set the proxy :- WebProxy oWebProxy = new System.Net.WebProx...