authentication

Private Video using YouTube API - Drupal

I want to set up my Drupal site to embed private videos from YouTube. I am the owner of these videos, and I have marked them as private to protect them from the general public. From the documentation, I have seen how to do an authentication where the user is taken to youtube, has to log in to his account, and consent to give my web app...

How do I generate a common hash from multiple passwords?

I've got an app that generates a hash off of a user password, which I then use to encrypt data with. I want to extend this to the case where any 2 out of 5 users need to authenticate the app before it has enough data to generate that hash. The problem I've got is I need to generate the exact same hash no matter which 2 of the 5 users au...

Live ID with MVC with out ASP.NET Membership

Does anyone know is there a way to implement Windows Live ID authentication into your ASP.NET MVC site. I am moving a project from Web Forms to a MVC solution and do not want to rebuild the database so ASP.NET Membership mentioned in windows-live-id-in-asp-net-mvc is not a valid solution. And just to avoide this question the customer not...

Ruby Webrick HTTP Authentication

How can I do the same authentication stuff in this page using a subclass like this: class Configuration < HTTPServlet::AbstractServlet def do_GET (request, response) SOMETHING.... end end server = HTTPServer.new(:Port => 666) server.mount "/conf", Configuration trap "INT" do server.s...

Why Content-Length is 0 while sending POST request with XMLHttpRequest object?

I have a virtual directory on IIS 5.1 with two aspx pages. Access to Page1 configured as "Integrated Windows Authentication" option turned on and anonymous access is disabled. Page2 available through anonymous access. On client side there is XmlHttpRequest object that can send requests that contains POST data to this pages. At first I t...

Cross-network WCF service authentication - What's the best way to do it?

Hi! I have a WCF service that's hosted at a commerical hosting facility that I need to authenticate against Active Directory on my corporate network. I should mention that there is no way to setup an AD-Trust between the two networks. Also, my corproate IT department sucks so any solution will likely need to be crafted and/or implem...

Accessing Controller Properties from a View

I have a User object on a Base controller, this is the standard type of User object you have with the .Net Membership Provider. I need this is decide if users have access to actions, views, and so on. I am having a problem whereby I want to display user information on the Masterpage. Like a login view from WebForms. I tried to access t...

Java HttpConnection refused, but curl equivalent works

I'm losing my mind on this one. My curl command works: curl http://testuser:testpwd@qabox3:8501/xmlcontroller But, when I try what looks like an equivalent http connection in Java it gives "connection refused". What am I missing? I've tried a dozen flavors of trying to make this connection today and am out of ideas. URL url = ...

Saving user credentials in a Windows application

Is there is a best practices way to store credentials in a .NET Windows application, be it be a built in API or just a recommend encryption algorithm? Along the same lines as Tortoise SVN, Spotify and Skype. Edit: My intention is to use a web service that returns a token from it's authentication service. The other services then accept ...

Authentication and authorization in .Net

I am struggling to choose what to use for authentication and authorization for my .Net application. I am using ASP.Net MVC with C#. In Java I find Spring Acegi Securiyy very easy and good to implement to secure urls, hide menus and button and even secure my methods. Also I would be using windows Active directory to store user profile. ...

Is it possible to forward the current user's FormsAuthentication Identity to another Controller action?

Hi, I'd like to use ASP.NET MVC's views as mail template engine. For that, I am calling one controller action from another controller action using a System.ComponentModel.Component.WebClient, parse the returned web page and send it via e-mail. In this scenario, is it possible to forward the current user's login credentials (I am using...

Authenticating the user

I am developing an asp.net application in 3.5 where authentication is done using cookies. On the default page I am authenticating the user and setting some value in cookie. Whenever I need to authenticate the user I just verify it from the cookie. If the user is not authorized then I redirect him to the default page for authentication. I...

Random AuthenticationManager CustomTargetNameDictionary exception when calling a WCF service

I Have been receiving this error when making a call to a WCF service from a ASP.Net application: Unhandled Exception: System.InvalidOperationException System.InvalidOperationException: The entry found in AuthenticationManager's CustomTargetNameDictionary for {URL} does not match the requested identity of host/{Hostname}. Server stack ...

What is the best Authentication and Authorization library for CodeIgniter?

I intend building an application using CodeIgniter so I'm currently identifying all the features I want. I would like to know if there are any recommendations for Authentication & Authorization libraries for CodeIgniter. ...

How to get Google cookies having the user and the password?

The tool I'm developing would do a thing similar to when you join Facebook and they ask your GMail username and password and with it they can grab all your contacts. But my tool doesn't use a browser, therefore it is difficult to get the proper headers. I assume that the Google application (Orkut) checks only my Cookies and Identity(ip,...

Security when specifying users in web.config

I'm considering using FormsAuthentication in my web app. Just how secure is it to specify the users in the web.config that are allowed to use the application? Here is an example of what I am talking about: <authentication mode="Forms"> <forms loginUrl="TestLogin.aspx" slidingExpiration="true" timeout="30"> <credentials> ...

A proper way to access files on different machine using C#

I want to read files off of different windows machine on the same network, NOT part of the same domain though. (ASP.NET C# app) Tried FileStream (can't authenticate), tried FileWebRequest (reverts to FileStream when file:/// is used), and impersonation (support.microsoft.com/kb/306158#4) Which says "impersonation failed" on my Vista. Upd...

get_allowed_auths() in paramiko

Hi all, I am trying to get supported auth methods from a running SSH server in Python. I found this method in the ServerInterface class in Paramiko but I can't understand if it is usable in a simple client-like snippet of code (I am writing something that accomplish in ONLY this task). Anyone can suggest me some links with examples, ot...

ASP.NET "logon" from external website

Looked but cannot find answer. Not sure exactly what Title ought to be. Hoping for some suggestions from "outside the box". I don't think I can be the only one facing this. "How can ASP.NET application best "accept" that user authorization has already been performed in a website"? We have our own ASP.NET (2.0) application. It suppo...

Secure user authentication - Am I doing it right?

I am developing an Asp.NET site for a customer, and want to make sure I am using a secure authentication scheme. In my user table, I have an authentication hash column that is calculated as sha1(salt + username + password). The site is being served via HTTPS. To log in, the user submits their name and password via HTTPS. The web serv...