authentication

how to allow RSS aggregators to use feeds available only for logged-in users?

I want to have RSS feeds in my Django application, which should be viewable only by a logged-in user. I want to allow users to add these RSS feeds to all aggregators, so I would need something which would work like this: supply the feed URL with a token, for example: http://example.com/feed/rss&token=AeYQtFjQfjU5m so that token will...

How to set Authentication Methods in IIS programattically

We are working on automating the deployment of some IIS applications. I've used cscript.exe inside a windows batch file to create the web app and such. There are however a few settings currently done by hand that I need to automate. Namely, if you look at the properties of an app, under Directory Structure -> Authentication and access...

How to impersonate another Windows user, when using Windows authentication?

I have an ASP.NET application where only users authenticated by Windows (i.e. logged on user) have access to most pages. Now, my client wants to be able to 'log on' through this app, with a custom login dialogue/page. Is Authentication the way to achieve this, and how do I go about it? ...

WCF: Issued Token authentication over Basic HTTP

I am trying to make a WCF service that will use token-based authentication (so I don't have to send a username and password with every request) but I would like to keep the interface simple, ideally Basic HTTP(S), because I need to be able to call the service from Flash. It appears that the Issued Token authentication mode has to be use...

How to use grail authentication plugin action from link?

I am using the authentication plugin in grails. The logout button code is something like this:- However this creates a submit button on the page. I want to have a link () instead. Does anyone know a way of doing this? I thought createLink might work, but not sure... ...

PHP: Problems with Facebook Connect authentification

I would like to develop an external website using Facebook Connect instead of an own login and registration process. On the first page (index.php) I have the following code for the login button: <fb:login-button v="2" size="large" autologoutlink="false" onlogin="window.location='/index.php'">Connect with Facebook</fb:login-button> Fo...

Can OAuth access tokens be used for securing Permanent access to an account?

Can I use the request token given by the OAuth provider and use it forever? I am looking to build a service which interacts with the Delicious api and looks for updated bookmarks every fortnight. I was just wondering if I could use the same request token instead of asking the user to authenticate again and again. If I cannot, which is w...

Desktop applications and authentication... Is there a list of authentication options?

Several sites, including this one, are using OpenID to authenticate their users. And of course, OpenID is a good solution to manage user accounts, simply by linking them to their OpenID account. But are there similar solutions that could be used for desktop applications? I know there's CardSpace, where you create a custom ID card to con...

Enforcing https connection

Hello folks! I have managed to get authentication at least partly set up but am mystified as to why security isn't working... In my httpd.conf file for ssl I have.... <Directory /usr/local/apache2.2/cgi-bin/oia> SSLRequireSSL Satisfy All AuthType basic AuthName "Protected Intranet Area" AuthUserFile conf/.pas...

Well built php applications to learn from?

Hello, I was wondering if any of you fine gentlemen would be able to recommend some of your favorite open source php applications in terms of code quality and proper programming technique. Though I have been using frameworks for quite a while, I would love to see how professional applications go about this. I'm particularly interested...

sql server authentication user

very basic question. sql server 2008, created new login and gave it sql authentication mode. checked status is enabled. Tried to connect to same server instance, login failed. What is going wrong? thanks for help in advance ...

How to authenticate users on TortoiseHg web server?

Hi, TortoiseHg web server configuration has an "Allow Push" parameter where I put the users allowed to push changes. But when I try to push I get an "authorization failed" error. How are the users authenticated? Where do the passwords come from? ...

Secure single mvc page

i have an asp.net mvc application that has authentication set to none in the web.config but would like to secure one view with windows authentication. is there any easy/good way to do this without changing the authentication configuration? ...

Logging custom actions in asp.net mvc using built-in forms authentication

Hello, I am using the built-in forms authentication that comes with asp.net mvc. I added all the necessary tables to Sql Server using aspnet_regsql wizard and I have it all integrated and working perfect. Now I can add users, log in, perform control Authorization and all these things. The next step is to add some basic logs when a user...

Accessing SharePoint authentication information from .NET ActiveX control

We have a .NET ActiveX control which is embedded inside a custom SharePoint page. The user has to authenticate (Windows Authentication not Forms Authentication) to access this page. Our ActiveX control is making web service calls back to the SharePoint server. Because the SharePoint server does not allow anonymous access, we need to p...

Running MongoDB with Authentication

I am trying to figure out MongoDB in order to evaluate whether it is a route I would like to take for future applications or not. In order to deploy it sensibly on my server, I would have to run it with authentication enabled (i.e. with the --auth argument or with auth = true in the config file). Installation seems relatively straightfo...

CakePHP Authentication with Prefix Routing

I'm building a site with CakePHP which I would like to have 3 sections: public area user area admin area I've setup prefix routing in routes.php which looks like Router::connect('/user/:controller/:action/*', array('prefix' => 'user', 'user' => true)); Router::connect('/admin/:controller/:action/*', array('prefix' => 'admin', 'admin...

Is OAuth and OpenID the right approach in this case?

I am still trying to wrap my mind around the workings of OAuth/OpenID, as such... I am developing an "installed app" that will run on computers and iPhone. A given user may install the client app on multiple machines, and all of the user's installed clients will synchronize via a centralized Google App Engine service. The GAE service ...

Drupal Custom Login by Role

I have a cURL PHP script which is able to validate a username/password against the external source. What is the best way to integrate this as a login requirement for (select) users in Drupal? The idea would be to add the external authentication as a login requirement for a role. ...

oauth vs authsub

why do we need authsub when we have oauth? ...