authentication

What should I use to create a login system for multiple sites similar to SO?

I am in the process of creating a series of websites and web applications that will be hosted on a dedicated server that I own and host. They will be developed on Windows Server 2008, IIS7 and .NET 4, SQL Server 2008 and Entity Framework. This will be a live server as well as a place for me to learn how to do some new stuff. A user wil...

Custom principal in ASP.NET MVC

I want to be able to access custom properties for an authenticated user like UserId and FirstName without querying the database each time. I found this site through a post on Stack Overflow and I like the approach - but I use IoC / repositories and decided not to try and get global.asax to communicate with the database for fear that it ...

Bypass authenticated XML page to be parsed with PHP?

Hello, How can I parse this xml page http://evercore:[email protected]/www.sportsbook.com/trends/203.xml using PHP simplexml? I get an error saying it can't be loaded. Thanks, S ...

Restrict certain user accounts to certain IPs in Django

Is it possible to only let a user log in while using a specific IP address? This IP address would be different for all users so simply writing an htaccess rule in Apache would not solve my problem. I also looked into writing a custom authentication backend but I don't see any way I could check the user's current IP address since there is...

WebSphere to Oracle - doesn't accept correct password.

In WebSphere 6.1 I have created a datasource to an Oracle 11g instance using the thin JDBC client. In Oracle I have two users, one existing and another newly created. My websphere datasource is OK if I use the component-managed authentication alias of the existing user, but fails with "invalid user/password" message if I use the alias ...

Is it possible to use a different Spring Security AuthenticationProvider in different servlets, same WAR?

I have a single WAR that runs two servlets. One provides AMF remoting to Flex clients and other SOAP/HTTP to web service clients. I currently have Spring Security configured to authenticate the Flex clients using DaoAuthenticationProvider. However, I'd like to use a different authentication provide for the SOAP/HTTP. Possibly basic a...

rails 3 authentication

i'm currently buidling my own blog using rails 3. and use devise gem for authentication. the problem is , i want only one user out here --- the admin user, and prehibits others from signing up, how can I achive that? ...

rails http basic authentication

in the view file, how can i ,check whether the user is authenticated? is there any helper methods like signed_in?, logged_in? etc. ? ...

How can I get the "purpose" (Client Authentication Certificate) of a certificate in .NET?

I want to find all client authentication certificates from the X509Store(StoreLocation.CurrentUser) Is there anyway to do this? Even by getting all then filtering by a certain property to get all Client Authentication certificates? ...

Facebook Graph API: Reuse the code verification string?

The authorization section of this page developers.facebook.com / docs / api contains a good description on how to perform authentication for a user agains my Facebook app. However, in my scenario I cannot get it to work the way I want. Here is how it is supposed to work: User comes to my login page and clicks a "Sign in with Facebook" ...

asp.net mvc session and membership authentication

Hi All, New to MVC, worked a lot with asp.net but never used the built in membership , authentication, authorization stuff before. I have 2 questions: In the asp.net days i would store the logged in user details (username, first & last name, email) in a session (using a custom class) and just checked that the session["UserDetails"] !...

Authentication on App Engine / Python / Django non-rel over JSON

I'm building a site on Google App Engine, running python and Django non-rel. Everything is working great for HTML and posting/reading data. But as I'm moving forward I'd like to do many of the updates with AJAX, and eventually also over mobile devices like Android and iPhone. My pages use django non-rel and my login/logout authenticatio...

Authentication with basicHttpBinding

I have converted my webservice to wcf service keeping the extension of wcf service as asmx since I have a large client base and do not want to ask users to change the extension. Currently I have username / pwd authentication for my clients which I want them to move out of. Since my user base calls my web service from all sorts of machine...

Users database structure that allows multiple simultaneous logins to same account

A feature that is currently missing from one of my web apps is that a single user can only be logged in on one machine at a time. That is, if the users logs in elsewhere, his previous session will be logged off. This is due to my current users table having the columns: user: id, username, hash, salt... cursession When each user logs ...

Log out everywhere, where else I am logged in

I currently use PHP sessions as the basis of my user login system, with a successful login setting $_SESSION['userid']. This allows a user to log in to the same account from multiple machines. However, I'd like to implement the following features: Log out everywhere, similar to what Stack Overflow has. See where else one is logged in....

How to ensure a .Net application is genuine?

In a client-server application how can the server know that a request comes from a genuine application and not from a tampered copy of it? I still haven't developed neither the client nor the server application. The solution may be plain socket, wcf, IIS hosted or whatever. ...

Authenticating ASP.NET MVC user from a WPF application

Hello, How can I authenticate a user (with username and password) of an ASP.NET MVC application? I'm trying to do this using WebClient, passing NetworkCredentials, posting the request to the ASP.NET MVC application from my WPF client. How do I handle this request on the server? How do I get the passed username and password? I'm using f...

Help with Kerberos authentication in IIS 7

Changed thread subject * - The issue isn't specific to WCF. We have some web content that is setup in virtual directories using integrated windows authentication. The virtual directories are running under application pools that are using a custom identity (custom user account). The problem is that NTLM authentication works however Ker...

Java HTTP PUT with Digest authentication in Java

enter code hereHi, I am trying to upload a file with Java using PUT, server does Digest authentication. I want to keep it lean, so I try to use HttpURLConnection. public void putData(String path, byte [] data) throws IOException, MalformedURLException { Authenticator.setDefault(new Authenticator() { protected PasswordAuthenticat...

Best practices with Forms Authentication and Routing?

My site (WebForms, C# 4.0) is using Forms Auth and by default requires login: <authorization> <deny users="?"/> </authorization> I allow unauthenticated access to the public folder (http://siteurl.com/member/public): <location path="member/public"> <system.web> <authorization> <allow users="?"/> </authorization> ...