How does OpenID authentication work?

What is OpenID? OpenID is an open, decentralized, free framework for user-centric digital identity. OpenID takes advantage of already existing internet technology (URI, HTTP, SSL, Diffie-Hellman) and realizes that people are already creating identities for themselves whether it be at their blog, photostream, profile page, etc. With OpenID you can easily transform one of these … Read more

How do popular apps authenticate user requests from their mobile app to their server?

I imagine they use a “token” based security system, so the password is actually never stored anywhere, just used the first time to authenticate. So the app initially posts the username/password (over ssl) and the server returns a token that the app stores. For subsequent sync attempts the token is sent first, the server checks … Read more

In Subversion can I be a user other than my login name?

Most Subversion commands take the –username option to specify the username you want to use to the repository. Subversion remembers the last repository username and password used in each working copy, which means, among other things, that if you use svn checkout –username myuser you never need to specify the username again. As Kamil Kisiel … Read more

Removing the remembered login and password list in SQL Server Management Studio

Another answer here also mentions since 2012 you can remove Remove cached login via How to remove cached server names from the Connect to Server dialog?. Just confirmed this delete in MRU list works fine in 2016 and 2017. SQL Server Management Studio 2017 delete the file C:\Users\%username%\AppData\Roaming\Microsoft\SQL Server Management Studio\14.0\SqlStudio.bin SQL Server Management Studio … Read more

How to get the logon SID in C#

I’m afraid you have to resort to using P/Invoke. There’s an example how to do it at pinvoke.net (please see the bottom of the page): Result = GetTokenInformation(WindowsIdentity.GetCurrent().Token, TOKEN_INFORMATION_CLASS.TokenSessionId , TokenInformation , TokenInfLength , out TokenInfLength ); Please note that I changed the example by altering just one line, I replaced TOKEN_INFORMATION_CLASS.TokenUser with TOKEN_INFORMATION_CLASS.TokenSessionId which … Read more

CakePHP remember me with Auth

In your user controller: public function beforeFilter() { $this->Auth->allow(array(‘login’, ‘register’)); parent::beforeFilter(); } public function login() { if ($this->request->is(‘post’)) { if ($this->Auth->login()) { // did they select the remember me checkbox? if ($this->request->data[‘User’][‘remember_me’] == 1) { // remove “remember me checkbox” unset($this->request->data[‘User’][‘remember_me’]); // hash the user’s password $this->request->data[‘User’][‘password’] = $this->Auth->password($this->request->data[‘User’][‘password’]); // write the cookie $this->Cookie->write(‘remember_me_cookie’, $this->request->data[‘User’], … Read more

Using LDAP for authentication in iOS

I have a port of OpenLDAP with Cyrus-SASL and OpenSSL in my iOS Ports project: https://github.com/bindle/iOSPorts If using Xcode 4.3 or later, please verify that the Xcode commandline tools are installed before using the following instructions. To include LDAP support: Clone the project: git clone git://github.com/bindle/iOSPorts.git Add the project file iOSPorts/ports/database/openldap/openldap.xcodeproj to your Xcode project. … Read more

Using Symfony2’s AccessDeniedHandlerInterface

This sounds about right. Or, if you’re specifically interested in AccessDeniedException you could also define access_denied_handler within your firewall in security.yml: security: firewalls: my_firewall: # … access_denied_handler: kernel.listener.access_denied.handler # … Then define your service in your services.xml or equivalent: <parameters> <parameter key=”kernel.listener.security.class”>Path\To\Your\Class</parameter> </parameters> <service id=”kernel.listener.access_denied.handler” class=”%kernel.listener.security.class%”> <tag name=”kernel.event_listener” event=”security.kernel_response” method=”handle” /> </service> The handler class: … Read more