user-authentication

Open Source login systems, what is good?

I am starting a a new web development project and I am tired of coding login systems. This is the kind of thing that must have been done dozens of times before. I really want to use someone else's code, because it is easier than rolling my own, and it will likely be better. I prefer open source for all the usual reasons, but mostly I wan...

user identification with openID

Since I have never used openID befor I have no idea about it. I want to know when someone want to log into my website using openID do I have to register his information (is there any registration process efen if the user don't fill the information). should I provide an alternative classical user registration beside openID. ...

PHP Authentication with monthly billing

A startup client of mine is looking to launch a SaaS with multiple features/options that would increase/decrease monthly billing. The simplest solution would be best. ...

Changing/Upgrading Existing Models

I starting building my app using nifty-generators for the user authentication because I'm new to Rails and it was the easiest approach. Now, we're looking to launch the app and I want to implement the popular Restful Authentication because we need some of the features it offers. I've never upgraded an existing model in this way, and I'...

Is it true that SQL auth is only great for multiple role apps ??

Hello, I believe Windows auth is the best practice to use to connect to SQL DB. I am hear talking about application user account.. Is it true that SQL auth is only great for multiple role apps and window auth is only good for single role app? I never heard that windows auth with muitple role os only good for smaill internal app? mult...

User authentication in asp.net or mvc

How to check user change his ip or not by any method in asp.net or mvc ...

User authentication in Django

I learned how to authenticate users in Django months ago, but I've since upgraded and am having some problems so it occurred to me this morning that I may not have been doing it correctly from the start so I decided to ask. In my project's urls.py file I've got ^accounts/login/$ and ^accounts/logout/$ both wired up to the built-in login...

django user auth + gwt

I have a django server app that communicates with a gwt front-end using JSON. I want to introduce user authentication to the app and have started to incorporate the framework provided by django. At this point I have set up the server to respond with the user authentication form when necessary (using the @login_required decorator scheme d...

Update cookies for Facebook connect based site?

I'm using the Facebook Connect API for the login system on a website built using PHP. There is no straightforward way to determine if a user is logged in. $fb = new Facebook($api, $secret); $fb->get_loggedin_user(); The above function always returns a user id, once a user has authenticated with the site, even if they sign out of Fac...

Are usernames a valid candidate for a primary key?

I know surrogate primary keys are generally recommended over natural primary keys but are the arguments in favor of the surrogate primary keys valid when it comes to usernames? ...

Whats the best way to do user authentication in php?

I have been simply writing 2 cookies, 1 containing the user ID, and the 2nd containing 1/2 the SH1 hash of the password (salted). The way it works is self-evident. I realized that I wasnt doing this in the most secure way. Whats a better way of doing this? Preferably using a single authentication cookie. Also, is there a point to usin...

Why is it a bad idea to use ClientLogin for web apps in the Google API?

I just picked up the Google API today to allow some users of our site to upload videos to our own organization YouTube account. I Don't want our users to know our user name and password, but rather give them the option if they want to upload videos to youtube or not. If they choose to do it, they check on a check box and hit the submit b...

Need help with a MySQL query

My query needs to do this get user details get last login out of a table of logins that are logged get number of failed logins, but only from the last 3 logins of that user My problem seems to be in the subquery. I want the WHERE part of that to reference the user_id that was matched earlier in the outer query. Is that even possible?...

Use default credentials in order to call DirectoryEntry

Hi, I am working in a Login page and teh logic is like -> try { DirectoryEntry LDAPLogin = new DirectoryEntry(ConfigurationSettings.AppSettings ["LDAPPath"].ToString(), Usuario, Txt_Contrasenia.Text.ToString()); if (LDAPLogin.NativeGuid != LDAPLogin.Name) ValidarGrupo(); } catch (Exception exc) { Label_Info.Text = "...

Getting user list in Silverlight?

Hi, I have a Silverlight web app which uses ASP.net Website administration tool for user authentication. Now is there any way by which I can get the list of all registered users in Silverlight? ...

Any working tutorials for Authlogic?

I've been trying to build my first rails app and have gotten stuck on the issue of user authentication. I've found a number of tutorials for using various plug-ins to do this, but so far every single one of them is out-dated, and as a result, broken! From what I've read, I think Authlogic may be the best fit for me, and I've tried two ...

How to make a user access security certificate.

I have a web application that I would like to allow persistent access to that is not dependent on the browser cookie system. Is there something that will allow me to, upon the first user authentication, send the browser a certificate which the app can check for periodically or upon future returns to the site? Maybe some take on an SSL? ...

Rethinking the User Login Process: User/Display Name and OpenID

Using openID has brought up some questions that I'm hoping the SO community can help me answer. OpenID and the (now obsolete) Username From what I've read, one of the main goals of openID is to eliminate the need for someone to create yet another username and password for some site they may only use once. While I think this is a reall...

Facebook Login as supplement to existing login?

I am developing a PHP/MySQL e-commerce site with some social aspects, and am looking to integrate it with Facebook. I already have a native user registration/session handling system. I have managed to include the iframe "Social Plugins" such as a "Like" button. But I really would like to offer users the option of registering with the sit...

Custom user authentication. How is it done, with the best practices?

I'm using Google Engine App with Python. I want to add custom user authentication. How is it done, with the best practices? I want custom authentication because the app is built in Flex and I don't want to redirect to an HTML page. The user value object is like this: class User(db.Model): email = db.EmailProperty(required = True, i...