Questions tagged [authentication]

Authentication is the process of providing a proof of identity or verifying identity.

Authentication is the process of providing a proof of identity or verifying identity. This might involve confirming the identity of a person or software program, tracing the origins of an artifact, or ensuring that a product is what its packaging and labeling claims to be. Authentication is different than Authorization, which is the step of allowing access to a resource. Authentication and authorization usually happen together to verify identity and then allow access.

The first type of authentication is accepting proof of identity given by a credible person who has evidence on the said identity, or on the originator and the object under assessment as the originator's artifact respectively.

The second type of authentication is comparing the attributes of the object itself to what is known about objects of that origin. For example, an art expert might look for similarities in the style of painting, check the location and form of a signature, or compare the object to an old photograph.

The third type of authentication relies on documentation or other external affirmations.

Factors and identity

The ways in which someone may be authenticated fall into three categories, based on what is known as the factors of authentication: something the user knows, something the user has, and something the user is. Each authentication factor covers a range of elements used to authenticate or verify a person's identity prior to being granted access, approving a transaction request, signing a document or other work product, granting authority to others, and establishing a chain of authority.

74922 questions
15
votes
2 answers

Authenticating to Active Directory with python-ldap always returns (97, [])

Similar to this question, I am trying to perform simple authentication to a 2003 Active Directory using python ldap (CentOS 6.2 x86_64, Python 2.6.6, python-ldap 2.3.10). Despite following all the usual steps in the init,…
Chris Doherty
  • 525
  • 1
  • 4
  • 12
15
votes
2 answers

When do I have to declare session_start();?

So Im a beginner when it comes to PHP so I need a little help. I am trying to figure out when to start the session. Should I do it when the user first registers or what about when they log in? Also, are sessions 'universal' meaning when I check a…
Matt
  • 159
  • 1
  • 1
  • 4
15
votes
1 answer

sign in with oAuth, what should i store/use to identify the user?

im trying to implement a login with facebook/twitter functionality in my app, i read some guides on oAuth, and i think i understood some of the basic concept, and here is what i understood (please correct me if i'm wrong): myApp send request to the…
hndr
  • 757
  • 13
  • 29
14
votes
2 answers

How do people handle authentication for RESTful api's (technology agnostic)

i'm looking at building some mobile applications. Therefore, these apps will 'talk' to my server via JSON and via REST (eg. put, post, etc). If I want to make sure a client phone app is trying to do something that requires some 'permission', how to…
Pure.Krome
  • 84,693
  • 113
  • 396
  • 647
14
votes
8 answers

Facebook oauth dialog shows "An error occurred. Please try again later."

I copied the HTML below from the 'Facebook for Websites' Facebook developer page and replaced APPID with my app id. I put this page on my dev web server. If I navigate to the page, it renders the login button just fine. But clicking the login…
Sami
  • 570
  • 1
  • 4
  • 11
14
votes
4 answers

PHP Session Destroy on Log Out Button

I'm currently working on a site that has a log-in (username and password) - The password protection is done by the operating system within the web server at folder level called a Realm within the OS. For now this will have to do, until we figure out…
fitzilla
  • 141
  • 1
  • 1
  • 4
14
votes
1 answer

How do I authenticate with my own site's API when using Facebook Connect for logins/account creation?

The title speaks to the majority of the question, but I'm having a hard time wrapping my brain around how I have Facebook authenticated users gain access to my own site's API. After the user has authenticated with FB I have a little bit of…
gstjohn
  • 392
  • 3
  • 9
14
votes
1 answer

Authenticated ServiceStack.Redis.PooledRedisClientsManager

How do I specify a username and password for the Redis hostname when instantiating a PooledRedisClientManager? var _redis = PooledRedisClientManager("my.redishost.com:1234"); I specifically need to deploy a .NET-based ServiceStack.Redis application…
Petrus Theron
  • 27,855
  • 36
  • 153
  • 287
14
votes
3 answers

socket.io authentication after socket established

I'm working on a small multiplayer game. I'd like to introduce authentication. I'm using Node.js and Socket.io. When the user arrives that the main page - I want them to join the game whether they are logged in or not - but they will be unable to do…
Chris Evans
  • 993
  • 2
  • 13
  • 30
14
votes
3 answers

setting HttpContext.Current.User

I am developing an asp.net mvc 3.0 application which has a simple authentication process. User fills a form which is sent to server by ajax call and gets response, but the problem here is that using the following method…
Babak Fakhriloo
  • 2,076
  • 4
  • 44
  • 80
14
votes
2 answers

How to login using FaceBook test users (created from the facebook developer app roles page)

Is it possible to login to facebook directly (facebook.com) using the test user account created using the Facebook Developer app feature (Roles / Create test users)? What password should I use? I understand we can use the "Switch to " option after…
saj-and
  • 479
  • 2
  • 9
  • 20
14
votes
5 answers

Password protecting a REST service?

After creating a basic REST service, I've have come to the point where it would be appropriate to add some sort of password protection, as I need to verify that my users are both properly logged and have sufficient permissions to execute whatever…
Industrial
  • 41,400
  • 69
  • 194
  • 289
14
votes
1 answer

Private Key File for SFTP in NetBeans

I'm trying to configure Netbeans for automatically upload PHP files to an SFTP server (I have not admin permissions in that server). Everything is OK, except that Netbeans launches a warning each time it needs to upload something: The authenticity…
Addev
  • 31,819
  • 51
  • 183
  • 302
14
votes
3 answers

How can I use certificate authentication with HttpsURLConnection?

I'm trying to connect to an HTTPS URL, but I need to use client authentication with a certificate placed on my system by third party software. I haven't the slightest idea how I'm supposed to either find or use it and all I have to go on is C#…
Valyrion
  • 2,342
  • 9
  • 29
  • 60
14
votes
3 answers

How to share a table between multiple Postgresql databases

My web app has multiple deployments -- each is a unique site with a unique URL. Each deployment has different data, UI, etc. but a very similar Postgresql database structure (with PostGIS). The databases all live on the same DB server. I would…
lubar
  • 2,589
  • 2
  • 26
  • 28
1 2 3
99
100