basic-authentication

apache: basic authentication before rewrite

I have an apache in frontend that redirect a request via a rewrite rule. I have to put a basic authentication before redirect a request, so I put this in the config file: <VirtualHost *:443> ServerAdmin xxxxxx DocumentRoot /var/www/html/ ServerName xxxxxxx RewriteEngine on ErrorLog logs/error.log CustomLog logs/a...

Use of WebDAV to access OWA (exchange 2003) mails with Basic authentication and SSL

I have got a working C# code for accessing OWA mails using WebDAV against a FBA enabled exchange 2003 (http://support.microsoft.com/kb/891748/en-us/) But my client's OWA (exchange 2003) has Basic authentication and SSL (i-e when I try to access the web mail link through browser I get a grey login box instead of a web page I can log into...

$.ajax + authentication + `@` in username

I am creating a web app which uses jQuery to authenticate: $.ajax({ url: "/session/create?format=json", type: "GET", dataType: "json", cache: false, username: $("#signin-email").val(), password: $("#signin-password").val(), success: function(data) { if(data.success) { success = true; } ...

Websphere 7 simple realm (like tomcat-users.xml)

I am trying to port a J2EE app from Tomcat to Websphere and I'm not too familiar with Websphere. The only problem I am having is authorization (I use basic-authentication in my web.xml). In Tomcat I use the tomcat-users.xml file to define my users/passwords and to what roles they belong. How do I do this "simply" in Websphere? When dep...

HTTP Basic Authentication credentials passed in URL and encryption

Hello, I have a question about HTTPS and HTTP Authentication credentials. Suppose I secure a url with HTTP Authentication: <Directory /var/www/webcallback> AuthType Basic AuthName "Restricted Area" AuthUserFile /var/www/passwd/passwords Require user gooduser </Directory> I then access that URL from a remote system via HTTPS, passing...

Native XML WebService With Authentication Basic and SSL

I'm using SQL Server 2005 and the Native XML WebServices. The integrated authentication via HTTP:80 works fine. But i need the basic authentication which requires SSL. So if i change the web service to ssl i always get a connection reset (101). I tried several ports 80,443,9999 with the same outcome. What is the error? --EXEC sp_delete...

Is it possible to expose an API for my own WebSite ... but use oAuth for the api authentication?

Hi Folks, currently I expose an Api for my website. Works great .. and i use Basic Authentication to authenticate users to get access to the data. eg. http://www.MyWebSite.com <-- main site. http://api.MyWebSite.com <-- my api website. sample api RESTful url http://user1:[email protected]/games?type=battlefield2 (yes yes...

Rails 3, Authlogic, NGINX and HTTP basic authentication no working nicely together

I am in the early stages of building an app using Rails 3. User authentication is powered by Authlogic which I have setup pretty much as standard (as per the example docs) and everything is working as expected locally. I have just deployed the app to a clean server install of Centos 5.4 / NginX / Passenger so staff can start to log in a...

How Configure app.config for HTTP Basic Authentication?

I am developing a SOAP client using C#. The web service requires HTTP Basic Authentication. Can I configure the username and password in app.config? Can u provide a sample? ...

Spring Security Configuration Leads to Perpetual Authentication Request

Hello, I have configured my web application with the following config file: <beans xmlns="http://www.springframework.org/schema/beans" xmlns:security="http://www.springframework.org/schema/security" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springfra...

HTTP basic authentication using sockets in python

How to connect to a server using basic http auth thru sockets in python .I don't want to use urllib/urllib2 etc as my program does some low level socket I/O operations ...

401 error when consuming a Web service with HTTP Basic authentication using CXF

I'm trying to consume a remote Web service that uses HTTP basic authentication, using Apache CXF, within a JUnit test. The error I am getting is: javax.xml.ws.WebServiceException: Failed to access the WSDL at: http://localhost:8080/services/MyService?wsdl. It failed with: Server returned HTTP response code: 401 for URL: http://lo...

How to pass a random User/Pass (for Basic Authentication) with JMeter?

Hi folks, I'm using JMeter to stress test an API. I've got Basic Authentication set up - seems to be working great. Now, i'm trying to randomize the credentials that JMeter passes across the wire. So, there's two ways I know I can do this. Add a custom HTTP Header (via an HTTP Header Manager Element) and set then value to the random ...

Basic Authentication from url in Restlet

I've been using Restlets "ChallengeResponse" mechanism to authenticate users on the server side. ChallengeResponse challengeResponse = getRequest().getChallengeResponse(); if( challengeResponse == null ){ throw new RuntimeException("not authenticated"); } String login = challengeResponse.getIdentifier(); String password = new Strin...

base64 for basic authentication in objective-c

I've seen some similar questions here on SO, but none recent - so i'm checking in to see if anything's changed. I see that didReceiveAuthenticationChallenge: is perfectly capable of doing a base64 encode for basic authentication, but the server i need to send a basic auth Authorization: header to doesn't return an HTTP401 and (I assume...

One Java EE web application with two auth-methods

Hi, I have a web-app that authenticates against a JDBC Realm. In the web.xml file I can use BASIC authentication or a custom form: <auth-method>BASIC</auth-method> <realm-name>JDBCRealm</realm-name> or <auth-method>FORM</auth-method> <form-login-config> <form-login-page>/login.html</form-login-page> <form-error-page>/error...

HTML: can I protect some pages from Google using user authentication ?

hi, A section of my website is accessible only for authenticated users. I was wondering if this pages are crawled by google, or they are kinda "hidden" to the search engine. thanks ...

WCF Basic Authentication and custom token authentication

Hi, I've got a RESTful WCF service using Basic authentication, a custom service host, and a . I've got a custom UserNamePasswordValidator set up, and a custom IPrincipal correctly flows through to the operation. For legacy interoperability, I need to support a different mode of authentication, however. The way it should work goes: ...

Is basic access authentication secure?

Using Apache, it is quite simple to set up a page that uses basic access authentication to prompt a user for a name/password and use those credentials in some way to grant access to that user. Is this secure, assuming the connection between the client and server is secure? ...

Custom HTTP Basic Auth Modules, in IIS7

Hi I am trying to implement the sloution found in the following question http://stackoverflow.com/questions/490627/custom-http-basic-authentication-for-asp-net-web-services-on-net-3-5-vs-2008/534878#534878 the one answered Feb 11 '09 at 0:04 eed3si9n When looking I have created my own AuthModule etc, but I am unable to add it to the ...