authentication

How can I do username,password validation at server side by contacting with Oracle database

How can I do the username and password authentication(the username and the password is stored in the database then contact with the database to validate if the username and the password is valid or not. If the username and the password is valid then show the next page otherwise show the same login page with error message) ...

how to identify an http redirect

Hello! I'm about to develop widget that will consume a web service built on top of existing functionality and it's requires that that web service should be aware of where the request is coming from.For example a consumer in the registration can provide information about it's blog or it's website that will be using the widget. Now i need ...

How do I use the RoleService class in WCF?

Hello, I'm pretty new to WCF, so this might be a very simple question. I'm implementing a service to be accessed from Silverlight. I'm using role-based authentication with my own ASP.NET Role and Membership provider implementations. It seems to be configured correctly - I can use PrincipalPermission attributes on methods. However, I'm...

Zend Framework Zend_auth sessions getting mixed up

I've two subdomains. Each subdomain has its own authenticated users database. I'm using $auth = Zend_Auth::getInstance(); if($auth->hasIdentity()){ } to check user login credentials. It works prefectly for each individual subdomain. But when I log into one subdomain and try to access 'restricted' page in another subdomain without log...

Is there a way to prevent saved authentication in Tortoise SVN

I am using Tortoise SVN, and I tend to have my own username/password stored in it's saved data so that I don't have to authenticate each time. Trouble is, we have a number of scripts, Final Builder projects and things that use another username - and so this overwrites my own username in the saved data. Then I go to make a commit and fi...

How to disable user login from multiple locations at the same time?

I want to control account sharing. The user account can be only logged into my web application once at a time. I thought of checking IP or browser type but seems not good enough. What's the best solution? ...

ASP.NET MVC User authentication - why it should be so sophisticated?

Hello guys, I'm trying to use ASP.NET MVC to my new project and have been expected that the user authentication should be rather simple there. My goal is to have a separate user database table in my main database. I thought that the SqlTableProfileProvider should be the solution. So I added the corresponding table into my database and ...

How should I securely store passwords and use http auth in a chrome extension

I'm making a chrome extension that requires fetching an xml file from a secure server. I'm currently using XMLHttpRequest() to make a call to the server https://username:[email protected] which returns an xml object that I can parse and display. I want this extension to be available for more than just my hobby use, so it needs an...

"Back" - browser must not go in previous page - after signed out

Hello, every one. I am developing an asp.net web site & I am not using inbuilt authentication controls of asp.net. I have created manually tables for users for site. What I want is as follows After logging in user can access the pages ( that is already done ) When user press sign out. ( user goes to specific page - example - default...

What is the correct usage of the Nitrogen Auth API?

Just wanting to confirm the usage of the Nitrogen Authentication and Authorization API. The description of the API is: wf:user() -> User or 'undefined' Return the user value that was previously set by wf:user(User) wf:user(User) -> ok Set the user for the current session. wf:clear_user() -> ok Same as wf:user(undefined). wf:role(Role...

django's UserCreationForm problem

Hi, I have got problem with django's UserCreationForm. It's very strange because ween I: view: from django.contrib.auth.forms import UserCreationForm from django.shortcuts import render_to_response form = UserCreationForm() context = {'form' : form} render_to_response('something.html', context) template: ... {% block content %} {...

PHP Login Redirects

This is maybe a stupid question, but I figured I'd ask before I did something goofy: I've got an web application with a custom Login dialog which takes a user/pass that gets sent to the server. If both match an entry in the database, then there is maybe 10 or so pages that the user gets access to (depending on the rights associated with ...

NetNamedPipeBinding and username/password authentication

I have a WCF service that I expose using different endpoints, one of which uses NetNamedPipeBinding. The other endpoints use a custom username/password validator to authenticate users, but as far as I can tell, this is not supported by NetNamedPipeBinding. How can I add a custom username/password authentication mechanism to a NetNamedP...

Basic authentication and session management library for PHP?

I know questions like this have been asked numerous times, but not quite this one. Forgive me if I overlooked an obvious duplicate. In the core of many of my web applications is a self-written user/session management class that in its origins dates back to 2002. I have decided that it is time for a fundamental re-write or, preferably, t...

Modern client/server authentication techniques

I'm building a non-browser client-server (XULRunner-CherryPy) application using HTTP for communication. The area I'm pondering now is user authentication. Since I don't have substantial knowledge in security I would much prefer using tried-and-tested approaches and ready-made libraries over trying to invent and/or build something myself....

Github post commit trigger build in Hudson with security enabled

Github has no problem with triggering a build in Hudson with security turned off because the build is a public URL. But I'd like to be able to have logins required on Hudson so that people can't arbitrarily build. I tried looking for a HTTP basic auth method so I can include the credentials in the URL itself, but couldn't find anything...

Source for various pictures in 120x120?

I am creating a web site with 2-stage authentication where users will have to verify a particular image on the screen (similar to how many banks and CC companies are currently doing this). Where can I find a large source of images (not icons) that are about 120x120 (or larger) for use in this? Ideally, Id like to find a few hundred of ...

asp.net windows authentication to sql server

I can not seem to get sql server to recognize my credentials. Asp.net recognizes me when I login but when I execute a sql command I get a login failed message. The IIS server and SQL server are on different machines. There are other applications the IIS server which are able to authenticate to the sql server. I believe the Active D...

How to get digest-authentication working on Team Foundation (2008) Project Portal sites

I am just starting out with Team Foundation Server 2008, and one of the hangups I've experienced is the following: I create a new Team Project, as well as a Project Portal (which I believe is just a Sharepoint site). When I go to view the project portal in the browser, it prompts me for a username and password. I want it to use diges...

Javascript Login Browser PopUp

If I have a different app on x-number of subdomains, it seems easiest to just have login be through the browser/javascript popup. Is this safe? Is it better to do this than server-side authentication? Do you have a little pastie on how to make the authentication popup and pass the info to say Rails? ...