Questions tagged [authentication]

Authentication is the process of providing a proof of identity or verifying identity.

Authentication is the process of providing a proof of identity or verifying identity. This might involve confirming the identity of a person or software program, tracing the origins of an artifact, or ensuring that a product is what its packaging and labeling claims to be. Authentication is different than Authorization, which is the step of allowing access to a resource. Authentication and authorization usually happen together to verify identity and then allow access.

The first type of authentication is accepting proof of identity given by a credible person who has evidence on the said identity, or on the originator and the object under assessment as the originator's artifact respectively.

The second type of authentication is comparing the attributes of the object itself to what is known about objects of that origin. For example, an art expert might look for similarities in the style of painting, check the location and form of a signature, or compare the object to an old photograph.

The third type of authentication relies on documentation or other external affirmations.

Factors and identity

The ways in which someone may be authenticated fall into three categories, based on what is known as the factors of authentication: something the user knows, something the user has, and something the user is. Each authentication factor covers a range of elements used to authenticate or verify a person's identity prior to being granted access, approving a transaction request, signing a document or other work product, granting authority to others, and establishing a chain of authority.

74922 questions
15
votes
4 answers

"Sign In" or "Log in" or "Login"

Possible Duplicate: UI Terminology: Logon vs Login Which is the right one to use - Sign in - Log in - Login Being a non-native English speaker it is difficult to distinguish them. I guess I should have asked at dictionary.com forum but I need a…
Gad D Lord
  • 6,620
  • 12
  • 60
  • 106
15
votes
1 answer

Django Rest Framework Session vs Token Authentication

I'm using DRF, and I've enabled Session Authentication so that I can view the browseable API in my browser. In my mobile app, i'm using token authentication. I'm just curious, how does session authentication differ from token authentication in this…
Steve Walsh
  • 6,363
  • 12
  • 42
  • 54
15
votes
3 answers

What is the standard procedure used for login-systems in iOS-apps?

I am creating an app and a website for a project I've got going, but I'm not sure what I should do about login. This is not a "I'm a noob and I want an app with login"-question. I am somewhat experienced with both web-, database- and…
Sti
  • 8,275
  • 9
  • 62
  • 124
15
votes
1 answer

Asp.Net Role-based authentication using Security groups in Active Directory

I am attempting to do something simple (I thought) - securing my application using roles-based security using Active Directory groups in our Domain. Specifically, I need to show/hide items on a page depending upon whether the currently logged in…
Kolten
  • 3,495
  • 5
  • 42
  • 59
15
votes
2 answers

ClaimsAuthenticationManager vs. IAuthenticationFilter vs. OWIN Forms Authentication

.NET 4.5, MVC 5: ClaimsAuthenticationManager, IAuthenticationFilter, OWIN Forms Authentication, and ClaimsPrincipals are all new since I last touched my site's authentication functions. I've found a lack of clarity in all the docs that say this or…
shannon
  • 8,664
  • 5
  • 44
  • 74
15
votes
2 answers

Login page in AngularJS

I've got a web application where all interactions require logging in. I see at least two ways of implementing a login page view in AngularJS. One is to use a separate view: let say I'm using angular-ui-router and define a top-level view with two…
liori
  • 40,917
  • 13
  • 78
  • 105
15
votes
4 answers

how to implement a login system for web apps?

I'm writing a login system for a website I'm building. Here is the essence of how I'm implementing the login system: I have two tables: users, and sessions. users: uid | uname | pass sessions: sid | uid | ts | ts_expires So the user enters a…
jrharshath
  • 25,975
  • 33
  • 97
  • 127
15
votes
1 answer

Authenticating requests to Microsoft.Owin.Testing.TestServer

I'm using the owin TestServer class to unit test my web api. It's working great except that I'm unsure how to authenticate requests, so I can't really test endpoints that require authentication, other than to make sure that unauthenticated requests…
w.brian
  • 16,296
  • 14
  • 69
  • 118
15
votes
1 answer

Resource Based Access Control vs Role Based Access Control

I am learning Apache Shiro, and I found this article: The New RBAC: Resource-Based Access Control And the author said: .......you could assign behaviors (permissions) directly to a Role if you want. In this sense, you would still have a…
hguser
  • 35,079
  • 54
  • 159
  • 293
15
votes
1 answer

How to proper authenticate an AngularJS client to the server

I'm building an AngularJS web-app that uses a RESTful API (Jersey). On the server side I am using a Java Application Server (in detail Glassfish 4). My setup is as follows: AngularJS webapp is deployed as a single war file to the Java EE…
zip
  • 579
  • 1
  • 3
  • 16
15
votes
2 answers

JAX-RS: How to secure REST endpoints?

I am using JBoss AS and JAX-RS for creating REST endpoints. Lets say my class looks like @Path("/users") public class UserResource { @GET public Response getAccount() { return "hello"; } } Now getAccount is not authenticated at the…
daydreamer
  • 87,243
  • 191
  • 450
  • 722
15
votes
2 answers

Using WebClient or WebRequest to login to a website and access data

I'm trying to access restricted data on a website using WebClient/WebRequest. There is no official API in that website, so what I'm trying to do is simply fill the HTML form and post the values to the server, so I'm logged in. I tried this and this,…
Shimmy Weitzhandler
  • 101,809
  • 122
  • 424
  • 632
15
votes
1 answer

Regarding OAuth 2.0: Are 3rd Party Cookies Enabled a dependency?

When blocking 3rd Party cookies using Google Chrome (latest), build 27 Win7/PC, I've seen that almost all OAuth logins from other sites don't work, with the exception of signing in with G+. I've already signed in with Google though, so that cookie…
brianjhong
  • 264
  • 1
  • 7
15
votes
5 answers

Does something like CanCan (authorization library) exist for flask and python

I love @rbates CanCan ruby library for authorization. Was wondering if anything similar existed for python / flask ? I guess there are three main requirements: simple declarative way of defining abilities (here is how CanCan does it) decorator for…
Jonathan
  • 16,077
  • 12
  • 67
  • 106
15
votes
11 answers

I'm not able to log in Tomcat Manager App

I have read a lot of topics in stackoverflow for solve my problem, but none was useful. When I tried to log in Manager App ([http://localhost:8080/manager/html][1]) using a lot of different configurations, but I always obtained 401 Unauthorized…
giaffa86
  • 708
  • 1
  • 9
  • 22