authentication

Redirecting back to a page after authentication through OpenID, Oauth, or Facebook Connect

I'm allowing users to login to my site with either OpenID, Twitter OAuth or FBConnect. If the user attempts to go to a page that requires them to be logged in, after that user logs in I want to send them BACK to that page. Is there an easy way to accomplish this with all of these or should I simply just write the redirect page to a coo...

Can I create automatic login to django using secret in URL?

How can I let users log in to my Django site just by clicking a link? I send out weekly emails asking my users to update information, and I would love to let them log in just by clicking a link. I have seen this on other sites (like Squarespace), but has anyone done this with Django before? ...

Forms Authentication & Virtual Directory

Hi, We're having trouble getting Forms Authentication to work with a virtual directory in IIS. We have a main site, and then a microsite setup within a virtual directory. This mircosite has its own admin system within an "Admin" folder, which has authentication on it but currently it is not kicking in and the admin section is browsabl...

Anyway to Authenticate a user using Google Apps in an Android application?

Hi, I was wondering if anyone knows of a way I can Authenticate a Google Apps User in a Android Application? One approach I know of is to take could take their username and password in a android view, and use the clientLogin interface (http://code.google.com/apis/accounts/docs/AuthForInstalledApps.html). However I was wondering if th...

simple auth system in django failing

I'm writing a simple auth system to login (and logout) users. The username is an email address, which looks up an email field. I'm using: user = User.objects.get(email__exact=email) # if user obj exists if user: # if authenticate if authenticate(user, email, password): # create session request.session['user'] = ...

How do I retrieve the user information of a user authenticated with Apache's mod_ldap?

I have LDAP authentication working with Apache. Now I need to know how I can get what user logged in with PHP. Is it even possible? Do I have to do the authentication in PHP to store the user name? ...

Security in Grails-app: Acegi or Shiro

Hi, i'm developing a Grails based web-application and i need to choose one of these two frameworks for authentication. In your opinion, what criterions favor the choice for Acegi and what criterions favor the choice for Apache Shiro? ...

Mutual-authentication with web services

Currently, I've been successful implementing Mutual Authentication security so long as the client accesses the website using a web browser, because browsers take care of all the certificate exchange for you. Now I need to create a secure interface with which users can access web services over HTTPS, using the mutual authentication requir...

Following Authlogic tutorial but: undefined method `email' for #<UserSession: {:unauthorized_record=>"<protected>"}>

I followed the official Authlogic tutorial but something came up. I successfully created a user, but when I try to show his profile page, I get the following error: undefined method `email' for #<UserSession: {:unauthorized_record=>"<protected>"}> Here's the relevant code: # user.rb class User < ActiveRecord::Base acts_as_authe...

C# windows service sending mail - client was not authenticated

Hey, I've got a windows service that sends mails to users. The code that is used, is the basic way for sending mail. SmtpClient client = new SmtpClient("servername"); MailMessage msg = new Mailmsg(); ...// configuration client.send(msg); If I set the credentials from client , i can send a mail through the Exchange server (2007). The ...

Authenticating servers - what's a good approach?

Edit Thanks for the suggestions; to clarify, we already use SSL, but that doesn't generally authenticate the requesting party, merely the responding party (IIRC?). I'll look into the other ideas right away, thanks for the brainstorm! Background The organization I work for has a heterogeneous bunch of servers providing various service...

WSGI/Django: pass username back to Apache for access log

My Django app, deployed in mod_wsgi under Apache using Django's standard WSGIHandler, authenticates users via form login on the Django side. So to Apache, the user is anonymous. This makes the Apache access log less useful. Is there a way to pass the username back through the WSGI wrapper to Apache after handling the request, so that it...

iPhone web service calls to WCF Service with Certificate Authentication

We are a .Net shop that has standardized on WCF Services. We are in the processs of developing an iPhone application that needs to make secure web services calls to obtain data for the app. To ensure secure communiations we have enabled SSL on our web servers. But this does not ensure the service can only be consumed by authorized apps. ...

Coldfusion LDAP Authentication issue / domain prefix

I am currently setting up a dev environment which is an exact copy of our prod environment. The problem is when I try to authenticate a user by using CFLDAP tag in the dev environment, it won't let me authenticate the user without prefixing the username with the domain name while in the prod environment we don't have to prefix the userna...

Managing application and SSRS authentication with IE7 shared process state

I'm trying to understand an authentication problem that occurs in an MVC application that links to an SSRS report via html form / URL integration to SSRS Report Server. The other important piece is that the MVC application implements it's security using ASP.NET Membership System in conjunction with FormsAuthenticationService. The use p...

RoR - Account - Login - Register + ...

Is there an automatic way in Ruby On Rails for authentication porpose? What gem is this and what does it do? Does it automaticly generate the tables and pages like when i should generate a scaffold? ...

Find user by authentication token in Rails?

So for a certain project I'm thinking it may possibly be useful for me to be able to take an authentication token and figure out which user it is for. I'm not sure if it's even possible or not. Anyone happen to know? ...

Easiest method to use a client-generated token for WCF authentication

(I tried searching, but couldn't find any truly helpful links.) We are implementing a set of WCF services. What I would like to do in these services is have the clients (which will be trusted application servers) be able to pass a token of some sort to the web service to authenticate. I do not want to be required to pass username/passwo...

Restrict content access to logged in users with PHP

I have a LAMP setup and I just want to be able to protect content on the webpage (images,css,videos,etc) so that only logged in users can access it. I realize I can do this easily with .htaccess. However I do not want to use the authentication popup, and I want to be able to use sessions and also be able to logout. I am using php to do...

problem with opening new document in document library with form authentication

i am working on Form authentication. After enabling Client Integration to YES i am getting all the menu items in document library.But when i am opening a new document or my own template it is showing error like word was unable to read it may be corrupted. ...