There are many questions asked here, and it seems that even though the questions are asked in the context of Node and passport.js the real questions are more about workflow than how to do this with a particular technology. Let’s use @Keith example setup, modified a bit for added security: Web server at https://example.com serves … Read more
Combining methods 3 and 4 from the original post into a kind of ‘fuzzy’ or dynamic whitelist, and then – and here’s the trick – not blocking non-whitelisted IPs, just throttling them to hell and back. Note that this measure is only meant to thwart this very specific type of attack. In practice, of course, … Read more
I suppose you want form based authentication using deployment descriptors and j_security_check. You can also do this in JSF by just using the same predefinied field names j_username and j_password as demonstrated in the tutorial. E.g. <form action=”j_security_check” method=”post”> <h:outputLabel for=”j_username” value=”Username” /> <h:inputText id=”j_username” /> <br /> <h:outputLabel for=”j_password” value=”Password” /> <h:inputSecret id=”j_password” /> … Read more
Edit 2019-04-07: As this is the currently selected answer, I think people should try @Anish Varghese solution below first as it seems to be the easiest. You only need to install the gnupg2 and pass packages: sudo apt install gnupg2 pass If it doesn’t work, then you can try my original solution here: I had … Read more
Based on what I understand, a good way to resolve it is by using the OAuth 2 protocol (you can find a little more information about it on http://oauth.net/2/) When your user logs into your application they will get a token and with this token they will be able to send to other services to … Read more
I found a complete solution for this question. (I’ve tested this in Chrome 27 and Firefox 21). There are two things to know: Trigger ‘Save password’, and Restore the saved username/password 1. Trigger ‘Save password’: For Firefox 21, ‘Save password’ is triggered when it detects that there is a form containing input text field and … Read more
Update for .Net Core 3.1: David Fowler (architect for the ASP .NET Core team) has put together an incredibly simple set of task applications, including a simple application demonstrating JWT. I’ll be incorporating his updates and simplistic style to this post soon. Updated for .Net Core 2: Previous versions of this answer used RSA; it’s … Read more
Update: revised in May 2013 for a better approach The user enters his username and hits “forgot password”. I also recommend the option of entering the email address instead of the username, because usernames are sometimes forgotten too. The system has a table password_change_requests with the columns ID, Time and UserID. When the new user … Read more
You can also just add the authorization header yourself. Just make the name “Authorization” and the value “Basic BASE64({USERNAME:PASSWORD})” var username = “abc”; var password = “123”; string encoded = System.Convert.ToBase64String(Encoding.GetEncoding(“ISO-8859-1”) .GetBytes(username + “:” + password)); httpWebRequest.Headers.Add(“Authorization”, “Basic ” + encoded); Edit Switched the encoding from UTF-8 to ISO 8859-1 per What encoding should I … Read more
Since you are going to use this on a login page. Here is a code I used in a Login page using Material-UI MUI v5 <Grid container spacing={0} direction=”column” alignItems=”center” justifyContent=”center” style={{ minHeight: ‘100vh’ }} > <Grid item xs={3}> <LoginForm /> </Grid> </Grid> MUI v4 and below <Grid container spacing={0} direction=”column” alignItems=”center” justify=”center” style={{ minHeight: … Read more