Questions tagged [authentication]

Authentication is the process of providing a proof of identity or verifying identity.

Authentication is the process of providing a proof of identity or verifying identity. This might involve confirming the identity of a person or software program, tracing the origins of an artifact, or ensuring that a product is what its packaging and labeling claims to be. Authentication is different than Authorization, which is the step of allowing access to a resource. Authentication and authorization usually happen together to verify identity and then allow access.

The first type of authentication is accepting proof of identity given by a credible person who has evidence on the said identity, or on the originator and the object under assessment as the originator's artifact respectively.

The second type of authentication is comparing the attributes of the object itself to what is known about objects of that origin. For example, an art expert might look for similarities in the style of painting, check the location and form of a signature, or compare the object to an old photograph.

The third type of authentication relies on documentation or other external affirmations.

Factors and identity

The ways in which someone may be authenticated fall into three categories, based on what is known as the factors of authentication: something the user knows, something the user has, and something the user is. Each authentication factor covers a range of elements used to authenticate or verify a person's identity prior to being granted access, approving a transaction request, signing a document or other work product, granting authority to others, and establishing a chain of authority.

74922 questions
15
votes
1 answer

Is it possible to have both Azure AD and Individual Account authentication in one ASP.NET MVC application?

I am kind of successful by doing this in the Startup.Auth.cs file // Configure the db context and user manager to use a single instance per request app.CreatePerOwinContext(ApplicationDbContext.Create); …
Imaya Kumar
  • 323
  • 3
  • 18
15
votes
2 answers

What is meant by two legged authentication?

What is meant by two legged authentication? Where and how it is used in programming?
Karthik
  • 3,221
  • 5
  • 28
  • 38
15
votes
5 answers

Remove authentication in ASP.net MVC single page application

I am trying to play about with the asp.net MVC SPA template in visual studio 2013, I don't need any of the authentication bits, I just need to load directly onto one of the controllers pages. How do I get rid of all the authentication stuff from…
colobusgem
  • 473
  • 1
  • 4
  • 18
15
votes
6 answers

Whats the best way to extend Anonymous User in Django?

I want to make my User objects all have the same base behaviour and to do so I need to add a couple of methods / properties to Anonymous User. I've already subclassed User to make richer user objects but I was wondering if anyone has done the same…
Ross
  • 17,861
  • 2
  • 55
  • 73
15
votes
2 answers

REST Authentication in PHP (CodeIgniter)

I writing REST API form my web application. Application is written using CodeIgniter framework. Application itself is working fine, but I'm stuck on making REST Authentication. I think that basic Http Authentication will be good enough for some…
zidane
  • 642
  • 1
  • 7
  • 19
15
votes
5 answers

smbclient NT_STATUS_ACCESS_DENIED

About once every 10 years I need to wrestle with SAMBA as I migrate to new hosts, and then I repress the traumatic memory until I have to relearn it all the next time :S Hence this newbyish question. I have a Ubuntu VM with a couple of shares - one…
Michael Lemaire
  • 746
  • 1
  • 6
  • 18
15
votes
1 answer

Difference between Google "OpenID Connect" and "sign-in with Google"?

I want users to my website to use Google Accounts to authenticate / sign in to my website. The primary use case being users will edit and generate content and we want to log ownership in a secure way. We are not interested in obtaining users…
samthebest
  • 30,803
  • 25
  • 102
  • 142
15
votes
4 answers

How to do authentication using SOAP?

How do I authenticate users with SOAP? Will I have to require the user to send his username and password with every SOAP request and I authenticate him against the database? Doesn't that seem to cause unnecessary queries?
YD8877
  • 10,401
  • 20
  • 64
  • 92
15
votes
7 answers

Laravel: share session data over multiple domains

I'm building a multi-domain/multi-store ecommerce application in Laravel and would like to keep the user logged in when he or she changes from store to store. But for as far as I know Laravel's Auth service saves the logged in user in the session…
Luuk Van Dongen
  • 2,391
  • 6
  • 26
  • 40
15
votes
3 answers

Flask-HttpAuth and Flask-Login

I am creating a small REST service. I am looking for different authentication methods. For sites I used the module Flask-Login. It seems the session authentication. The module Flask-HttpAuth provides the http and digest authentication methods. I am…
Victor Shelepen
  • 1,966
  • 2
  • 16
  • 41
15
votes
4 answers

How add service reference in visual studio 2008 authenticating against password-protected web service

I want to reference a web service, and it requires user/pass authentication. In VS 2008, if I try to "add reference", or "add service reference", all I can type is the URL, there's no way to input my credentials. Obviously, if I try to load the ws,…
ditto1977
  • 215
  • 2
  • 4
  • 10
15
votes
10 answers

How can I validate/secure/authenticate a JavaScript-based POST request?

A product I'm helping to develop will basically work like this: A Web publisher creates a new page on their site that includes a