Questions tagged [authentication]

Authentication is the process of providing a proof of identity or verifying identity.

Authentication is the process of providing a proof of identity or verifying identity. This might involve confirming the identity of a person or software program, tracing the origins of an artifact, or ensuring that a product is what its packaging and labeling claims to be. Authentication is different than Authorization, which is the step of allowing access to a resource. Authentication and authorization usually happen together to verify identity and then allow access.

The first type of authentication is accepting proof of identity given by a credible person who has evidence on the said identity, or on the originator and the object under assessment as the originator's artifact respectively.

The second type of authentication is comparing the attributes of the object itself to what is known about objects of that origin. For example, an art expert might look for similarities in the style of painting, check the location and form of a signature, or compare the object to an old photograph.

The third type of authentication relies on documentation or other external affirmations.

Factors and identity

The ways in which someone may be authenticated fall into three categories, based on what is known as the factors of authentication: something the user knows, something the user has, and something the user is. Each authentication factor covers a range of elements used to authenticate or verify a person's identity prior to being granted access, approving a transaction request, signing a document or other work product, granting authority to others, and establishing a chain of authority.

74922 questions
14
votes
4 answers

Hiding my sensitive information (e.g. password) from github

I just set up Devise (rails authentication plugin) to send a confirmation email upon sign up. This involved my putting the following into my environment.rb file: ActionMailer::Base.delivery_method = :smtp ActionMailer::Base.smtp_settings = { :tls…
jyli7
  • 2,731
  • 6
  • 23
  • 31
14
votes
2 answers

nginx auth_basic time limitation

I'm protecting my dev server using nginx and the auth_basic module, but I can't seem to find a way to specify the interval at which the 'authentication' expires. I would like to be able to force nginx to ask for the password say every 6 hours. Is…
ergelo
  • 923
  • 2
  • 9
  • 15
14
votes
2 answers

Using LDAP for authentication in iOS

I have been looking for a tutorial on using LDAP on an iOS device is this possible? I havent seen any articles or tutorials on it. Is there another way I should be going about doing authentication against my Active Directory? Can anyone point me in…
ios85
  • 2,104
  • 7
  • 37
  • 55
14
votes
2 answers

How to call devise sign_in and sign_out methods of devise from another controller different from devise?

I have a Ruby on Rails 3.0.7 application and my user authentication with devisebut and I have an alternative sign up and sign in methods, I allow my users to sign up using their Facebook account then I save that login info in my users table the same…
Mr_Nizzle
  • 6,644
  • 12
  • 55
  • 85
14
votes
4 answers

Node.js http basic auth

Is it possible to do basic auth in Node.js just like in Apache? http://doc.norang.ca/apache-basic-auth.html I know that if using Express or Connect I can add middle-ware functionality and do user verification, but I'm trying to restrict the whole…
Jaime
  • 153
  • 1
  • 1
  • 7
14
votes
5 answers

Java Web Application: Using a custom realm

I'm writing a java web application which need to perform login through a webservice. Of course, none of the realms supplied with the application server I'm using (glassfish v2) can do the trick. I therefore had to write my own. It seems however,…
LordOfThePigs
  • 11,050
  • 7
  • 45
  • 69
14
votes
3 answers

How do I connect to a MySQL instance without using the password?

I trying to connect db I have set no password for the db I am leaving blank in the password field. But it's not connecting and showing error connector.go:95: could not use requested auth plugin 'mysql_native_password': this user requires mysql…
zircon
  • 742
  • 1
  • 10
  • 22
14
votes
1 answer

gcloud identity token vs access token

What is the difference between access-token and identity-token when we use gcloud auth print-access-token and gcloud auth print-identity-token? What are the cases where we can use one and not the other in Google Cloud context. Why we have…
14
votes
5 answers

Integrated Windows Authentication showing wrong loggedin user

I have an asp.net 2.0 application running on IIS 6.0. I am using Integrated Windows Authentication. Some users have two network accounts, a personal account and an administrative account. The problem I am facing is that sometimes when they are…
Marwan
  • 1,058
  • 1
  • 11
  • 20
14
votes
1 answer

"No current user": Isn't it even possible to make unauth calls to AWS AppSync through Amplify with authentication type AMAZON_COGNITO_USER_POOLS?

I have an AWS AppSync schema with the default authorization mode set to Amazon Cognito User Pool. I make calls to this AppSync endpoint from a web app using AWS Amplify GraphQL Client and, coherently, its configuration points Cognito User Pools as…
14
votes
3 answers

Should Refresh Tokens in JWT Authentication Schemes be Signed with a Different Secret than the Access Token?

I have a very simple question that is essentially as stated in the title. When implementing a JWT authentication scheme that incorporates short-lived access tokens and longer term refresh tokens, should these two token types be signed with different…
tomking
  • 313
  • 1
  • 11
14
votes
4 answers

Google app engine - login with Google, Facebook

I would like the users of my application, hosted in Google app engine, login the same way I do in StackExchange, using my Google account or Facebook account. I have some questions on this: I would like to see some tutorials on basic login only I…
Mc-
  • 3,968
  • 10
  • 38
  • 61
14
votes
5 answers

Check whether the allow anonymous is on or not in ASP.NET Core

I need a way to check if "allow anonymous" is on/off in the controller action. Whether it comes from controller attribute, action attribute [AllowAnonymous] or it is set as filter in the MvcOptions opts.Filters.Add(new…
moozywu
  • 209
  • 1
  • 2
  • 10
14
votes
1 answer

Multi-Factor Authentication with Spring Boot 2 and Spring Security 5

I want to add multi-factor authentication with TOTP soft tokens to an Angular & Spring application, while keeping everything as close as possible to the defaults of Spring Boot Security Starter. The token-validation happens locally (with the…
14
votes
3 answers

Register authentication schemes based on tenant in asp.net core 3.1

Currently, I have created an Identity server 4 web application with external login providers with default client id and secrets. But my goal is to register the authentication providers like Azure, Google, Facebook based on tenant. I have used…
1 2 3
99
100