authentication

http client authentication c#

Hi, I am a systems guy and currently doing a part time web development project so am pretty new to it. I am trying to write a http client for www.portapower.com . Basically what it will do is check for certain items which are posted on the website and if they match a particular requirement it will print a message. While trying to access...

Custom IPrincipal together with WindowsAuthentication

Is there any good way of combining ASP.NET Windows Authentication with a custom IPrincipal/IIdentity object? I need to store the user's email address and have done so for Forms Authentication using a custom IIdentity/IPrincipal pair that I added to the Context.CurrentUser during the AuthenticateRequest event. How would I best go by to ...

cookies created in wordpress (latest)

i just installed wordpress (the latest) and im trying to study wordpress to make my creations secure like wordpress does or to its level. I noticed upon logging into wordpress, it created 3 cookies. what I'm trying to figure out is - after logging into wordpress and after it created the cookies for the user. the hash values that are i...

Authentication combination OpenID & Facebook

Is it possible to use a combination of authentication systems in a web app? I want to use OpenId, however I think my potential customers are actually more likely to have a Facebook ID. Therefore I wonder if it is possible to offer both types of authentication? ...

Forms Authentication...

I've been programming for a long time now, but I'm not the world's most experienced.Net developer. I recently picked up a project that is using Forms authentication for their website. I first looked at forms authentication in .Net 1.1 and at that time it had some limitations that made me decide not to use it as my primary form of authe...

How can I support anonymous users with my application?

I need to implement a user authentication system that supports anonymous users, like how this site works. Can it be done with the default asp.net membership provider? if not, what are some of the things I need to do? ...

What are the pros and cons of using an email address as a user id?

I'm creating a web app that requires registration/authentication, and I'm considering using an email address as the sole user id. Here are what I see as the pros and cons (updated with responses): PROS One less field to fill out during registration (it would just be email address, password, and verify password). I'm a big fan of minim...

IIS7 url rewrite w/ ASP.Net 3.5 SP1 + asp:Login Form does not work

Hi everyone This question was kind of touched before but not the answer I was looking for. I am using the IIS7 URL Rewrite module to rewrite my pages, and now my asp.net login form does not work!!! On my master page I have this (ASP.Net 3.5 SP1 feature)... if (!String.IsNullOrEmpty(Request.ServerVariables["HTTP_X_ORIGINAL_URL"]))...

Setting up JDBC Authentication in Jetty

I need to setup basic jdbc authentication using jetty. can anyone throw me some pointers (article, tutorial or even some simple solutions) ...

What's the best way to integrate Rails Restful Auth App Login into Wiki (MediaWiki?)

I have a ruby on rails app using restful authentication and I'm looking to add a Wiki to my site. MediaWiki looks like my best option since it's full featured and I can work with the LAMP stack. However, I'm not sold on MediaWiki if there's another (preferably open source) app that will integrate better. I would like to know if anyone...

How to impersonate a user when calling a .NET web service from a SharePoint webpart?

What is the best practice for impersonating the current SharePoint user when accessing a web service that uses NTLM authentication? The webpart has the user name but not password, and apparently, passing the network credential from the webpart does not work. The remote web service uses NTLM to authorize the user. ...

routing to blank request in mvc asp.net using IIS 6.0

I'm attempting to connect to my published website using the following url. http://www.mywebsite.com/ I keep getting: The incoming request does not match any route. Here are my routing rules: routes.MapRoute( "Default", // Route name "{controller}.aspx/{action}/...

Logout with http basic authentication and restful_authentication plugin

Hi All, I have the restful_authentication plugin installed in a rails app, with a sessions_controller that has a destroy method like this: def destroy self.current_user.forget_me if logged_in? cookies.delete :auth_token reset_session flash[:notice] = "You have been logged out." redirect_back_or_default('/') end In the appli...

Authenticating WCF Endpoint request though multiple "Stores"

Can a single WCF Service endpoint be set up to authenticate against multiple Authentication stores? i.e. if UserName and Password supplied check Custom DB, otherwise try Windows Auth. Background: I have WCF Service A which is injected with a client proxy to WCF Service B. Service B could have a dependency on Service C etc. A User requ...

Sockets Authentication is failing using NegotiateStream

I've got a Socket that is connected that I use to get HTTP header responses. If I skip authentication, everything works fine (unless the page requires authentication). But when I step into this code, it always throws an IOException on the AuthenticateAsClient line. The message is: of "Unable to read data from the transport connection:...

How to Best Handle Authentication Via the URL in PHP

I need to be able to send users a link that contains an encrypted value which is used to authenticate the user when they visit the link. The current process uses a salt and roughly 40 character unique hash which is then encrypted and base64 encoded so that it can be safely be transported via email and in theory come back safely through...

What is the best method for taking a site down and kicking out users to do an upgrade?

I'm wonder how people are kicking people out or blocking access to a site when you want to do an upgrade and you have users that are logged in. My one thought is to just put a bool setting in a global file (such as the settings file) for whether or not the site is unavailable. True is available, while false is unavailable. When false, t...

TortoiseSVN not asking for authentication?

I've setup a new SVN repository, running SVNServe, in the conf file, anon-access = none. SVNServe faithfully does that correctly, but when I try to browse the repos using TortoiseSVN, it just says access is not allowed. Shouldn't it ask me for the user name and password instead? How do I get TortoiseSVN to ask me for the login details?...

Internet Explorer and client authetication

I would like to have Intenet Explorer allow me to choose an identity when connecting to a client-authentication enabled web server. Currently I have my Tomcat web server configured to use client authentication. I also have an ssl client accessing a keystore and successfully connecting to the web server. However when trying to get IE...

How often is authenticated SOCKS5 used as an HTTP proxy in organizations?

I'm wondering how frequently organisations use SOCKS5 as their web proxy protocol over, say, HTTP or authenticated HTTP proxies. Should an application even bother supporting SOCKS5 as an HTTP proxy? What percentage of organisations use SOCKS as a HTTP proxy? If you work in an organisation where you use SOCKS5, particularly authenticat...