Questions tagged [authentication]

Authentication is the process of determining whether someone or something is, in fact, who or what it is declared to be.

Filter by
Sorted by
Tagged with
22
votes
6answers
2k views

Login Form in HTML

I am a beginner and I have made Login Form in HTML. I'm pretty sure it will look horrible to any developer, but hey, that's why I've posted it. I'd like a general review of this. I'm especially ...
18
votes
6answers
9k views

Login form C# SQL

Basically this is my first login form. I am using SQL and C# WinForms. I made user roles such as "Admin" and others and the user is taken to a specific WinForms, according to his appointed role (...
14
votes
3answers
11k views

PHP Login System with persistent login

I'm writing my first CMS (for personal use) and I'm trying to make it the most secure I can. This is my project structure: ...
14
votes
1answer
28k views

Web API 2 authentication with JWT

Please review my code for bearer token (JWT) authentication of Web API 2 (Self Hosted using OWIN) Are there any security issues in the implementation? Quick overview: Token creation and validation ...
12
votes
6answers
3k views

Efficiency with strcpy, strcat and malloc

I'm still learning C, but I'm trying to make sure I've got a decent grasp on working with "strings" and data structures. If possible, I'd like a little input on how I'm handling this and see if it ...
12
votes
2answers
383 views

Sessions and Authentication

I've a feeling I'm overdoing my Auth class, and that it could be done in a simpler and more understandable way. Could you give me advice on this, please? This is ...
11
votes
8answers
20k views

Basic password authentication system app

This is a console app I wrote for an end-of-chapter assignment in Jumping into C++. The parameters were for it to have a basic password system, and if you are eager, a multiple password / username ...
11
votes
3answers
76k views

Simple authentication in ASP.NET MVC 5

I am building an ASP.NET MVC 5 application and, for reasons which are irrelevant at this point, I am attempting to build my own means of authenticating users. I'm still very new to programming, ...
11
votes
1answer
626 views

Command-query segregation principle for an authenticator

The Authenticate method violates the command-query segregation principle, right? How can I adhere to the command-query segregation principle here? ...
11
votes
1answer
479 views

node.js passport wrapper

I have started some experiments with node.js. Any comment on style (especially the callbacks) and best practice is appreciated: PassportControl.js ...
11
votes
1answer
45k views

Custom Authentication, Authorization, and Roles implementation

I've got an MVC site, using FormsAuthentication and custom service classes for Authentication, ...
11
votes
1answer
529 views

node.js Passport Wrapper 2

First attempt was done here: My second attempt (now using jslint to make sure the spacing is correct and have incorporate the majority of the feedback from previous attempt). ...
10
votes
2answers
351 views

Update of Classes for user registration and authentication

Old Post: Classes for user registration and authentication This post is an update of the old post of mine. This is the code after suggestions were implemented in the review. Do you think I could make ...
10
votes
5answers
67k views

Python username and password program

Can the following code be simplified? I think that the program that I have created is very excessive and quite slow. The program runs fine, but I would like to understand if this could actually be ...
9
votes
4answers
20k views

PHP OOP Login Class

This is a login class I made for my personal website. What I don't care about, is how secure this login class is, because I know it's not. But it keeps out the rare unwanted guests because I do not ...
9
votes
1answer
2k views

Login system based off of another site

I have created a PHP login system based off of this site. My main concern is: Is it secure? I chose that because to me it looked secure, but a 2nd or 3rd opinion never hurts. The idea of the project ...
9
votes
1answer
15k views

Authentication with JWT

Please review my code for 'JWT' authentication. Are there any security issues? Where should I store the secret's key, DB or InMemory? What's a good 'JWT' Lifetime? Should I send the 'JWT' in Header ...
8
votes
3answers
622 views

Comments in PHP authentication system

Leaving aside absolutely everything about the code itself (but if you find stuff that's not ok feel free to comment on them). What I'm asking here is the following: Is my code properly commented? ...
8
votes
3answers
34k views

First PHP login system

This is my first attempt at a login system! I've only had roughly 2 days of experience with MySQL and PHP so far and this is what I came up with: ...
8
votes
5answers
739 views

Securely handling a password protected application

I have some small applications that I want to secure. I've been using the following setup that I think is fairly safe, but I've never been able to set my mind at ease that it really is. Could you ...
8
votes
1answer
41k views

Simple login system using Python Flask and MySQL

I've made a login page using Python Flask which works with MySQL. I started learning Flask 2 days ago and it was fun, so I came up with this: ...
8
votes
4answers
21k views

Register/Login and authentication through terminal

This is a registration and login program I made in Python that runs through the terminal. I am new to programming so I didn't have any actual use for this, I simply made it for practice. Please give ...
8
votes
2answers
623 views

A PHP User System

This PHP User System was built with MySQLi and I also used Composer. I'm planning to improve this, and add more stuff and release it as a sort of a module for Composer. User.php (Controller File in ...
8
votes
1answer
185 views

One way encoding a password

I wrote a script that one way encrypts a user's password by generating a key, and multiplies by the ASCII value of the character and the ASCII value of the key character at (the position that the ...
8
votes
2answers
2k views

User authentication system

I'm new to OO PHP and I'm trying to create a simple properly-designed user authentication system. What am I doing right and what not? Is this right according to the MVC model? Connection.class.php ...
8
votes
1answer
950 views

WCF Duplex service authentication

I have been thinking about a way to implement this and I am not sure that what I have done is correct, because it surely sounds kinda dirty to me. Basically what I have is a WCF duplex service which ...
7
votes
2answers
520 views

PHP login based on a password parameter

I'm learning PHP now, and I'm trying to find out whether or not the following code structure has any faults: ...
7
votes
3answers
4k views

A Simple, One-Page PHP Admin Login (with prepared SQL statements)

First off, I want mention that this code works well. This is more of a request for suggestions... We're attempting to program a one-page, recursive, token-based admin shell that is safe from ...
7
votes
3answers
159 views

Java Servlet & JSP simple login

I am currently learning Java Servlets and JSP at university. As a little practice I created a project where I want to be able to login into a protected area. Now, I got it working by using a ...
7
votes
2answers
58k views

User registration and login program

I've recently stared learning C++ so I'm new to all of it. I've got my fourth "software" under development. Could someone have a look through and give me some constructive criticism on what should I ...
7
votes
2answers
6k views

Classes for user registration and authentication

...
7
votes
2answers
236 views

Authentication service

This is the AuthenticationService I made based on Barry Jaspan's design, which is way better than the code of which I asked in a question a couple of months ago. I ...
7
votes
2answers
1k views

PHP library for handling account creations, logins, and file uploads

I'm new to OOP and PHP. I've made an attempt at a PHP library file that handles account creations, logins, and file uploads with image resizing on the fly. It works so far. I'd like some help with ...
7
votes
1answer
10k views

Authenticating with the official Mojang (Minecraft) server

Minecraft is a game which also has multiplayer capabilities. You need to have an account (which needs to be verified) for playing on servers. The authentication procedure looks like this: ...
7
votes
1answer
170 views

Reduce amount of calls to database for authentication

I'm currently having a bit of code, which I just know can be improved a lot. I am just blind to it. All of my code looks quite neat to me, except these parts... The login + authentication process is ...
7
votes
1answer
3k views

React Native - Combining login and signup pages into one component

I have been building an app in React Native and have decided that since my Login and Signup components share much of the same ...
7
votes
1answer
10k views

Python auth using requests

I am trying to implement a custom ApiClient in Python, using requests. The way it does authentication is by: login(username, password) -> get back a token if valid, http error code if not set the ...
7
votes
1answer
1k views

Go cookie authentication system

I'm working on a login system in Go (Golang). Previously, I was using Gorilla Sessions for this, but I wanted to see if I could reinvent the wheel and make it simpler. Also, I don't need to store ...
7
votes
1answer
430 views

Login system, PDO and me

I have run into a bit of a dilemma. Binding user input and building a prepared statement is all well and good, but what if I need the user input as a variable for a compare? Can I just create a ...
7
votes
0answers
560 views

Let's register that Django user

Short intro So, I've been using Django for a while now and thought it would be nice to start a simple application. In an ideal World, each app must have a way of letting its users register and that's ...
6
votes
5answers
2k views

Creating Original Database Algorithm--Login System

For fun, I have been making a very basic login system in Python. I was going to look up an algorithm or something for user info storage and transfer, but then decided it would be more fun to come up ...
6
votes
6answers
24k views

Username, Password and UserType Validation

I have two tables in the database: Credentials (userid, password, usertype) Customer (...
6
votes
4answers
379 views

Iteration of password hashing in PHP

I'm trying to improve the security for my backend: ...
6
votes
3answers
20k views

Configure AspNet.Identity to allow for either username OR email address on login

I am wondering if there is a more efficient route to take here. Using AspNet.Identity I would like to allow the user to sign in to the same text box using either ...
6
votes
1answer
7k views

Checking two text field for match and checking for null

Is this the most efficient way to do this? Any suggestions on some thing I might have missed or can do better? ...
6
votes
3answers
370 views

C++ simple password-protected console app

I have been reading about passwords and hashing algorithms and what not and decided to write a program. Overview: The user should be prompted to create a password the first time the program is ...
6
votes
1answer
530 views

Login UI for an Android app

This code starts a new thread for login and reacts according to the JSON result returned by the server. I think this code has too many conditionals, exception handlers, and nested functions. ...
6
votes
2answers
288 views

Password recovery program

This is a password recovery program I made, and I just want it checked out. These aren't all the files for the login and register system, only the password recovery part. The columns in the ...
6
votes
1answer
228 views

Ensuring non-expired token before every request

I'm developing an iOS application where data is fetched from a third-party REST API. Each request must contain an authorization token. In order to implement this, I've written a ...
6
votes
1answer
10k views

Single Sign On - SAML Response generation

I am trying to implement a IDP initiated Single Sign On Solution (service similar to onelogin's) to Cloud based Service providers such as Google Apps, Salesforce etc. The project is a Maven eclipse ...