Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

1
vote
0answers
17 views

Allow our own systems to use an API and restrict it from the general internet without using authentication

I have an Apache server which is reverse proxy'd to some Java container. In Java container there is an API that we don't want internet to see but expect our own systems to use it without any ...
1
vote
0answers
287 views

Append basic authentication header NGINX to existing authentication header of upstream application

Assume the following setup: The NGINX reverse proxy is asking for basic authentication (which is a good habit when you expose things on the internet). Basic authentication uses the Authorization ...
0
votes
1answer
38 views

It is harder for users to log on to my website when using gmails “+company” email address feature. How can I help them?

If you have a website and lots of people create his accounts with this format: mail+mycompanysite@gmail.com mail+companysite@gmail.com mail+company_site@gmail.com This issue is causing me several ...
1
vote
1answer
26 views

How do I log in into Apache web server on Ubuntu from Windows?

I've been given a username and password for an Apache server, that runs on Ubuntu, and belongs to my professor. I do not know how to connect to the server from my machine(windows), and run scripts ...
1
vote
0answers
60 views

Why does CPanel keep prompting me for credentials

When I login directly to CPanel, I login successfully and can see various parts of CPanel (text only, no images), but the system keeps prompting me to login again. When I login via WHM, everything ...
2
votes
1answer
28 views

Individual directory options for every VirtualHost in Apache2

I have a Debian 9 server with two static IPv4 addresses. One of them is public and the other one is in the server's VPN subnet (the machine is running an OpenVPN server). There is a DNS server in the ...
1
vote
0answers
15 views

double authentication for https password protected password

I am hosting a customer's OpenCart store on my own domain hosting. I have add-on domain in my CPanel for customer's domain and created sub domain for it to ease access. Other than the double ...
0
votes
0answers
10 views

Sending mail from PHP - Gmail can't verify my domain send the message [duplicate]

I'm having an issue sending "verified" emails to a mailing list for my website. I have some PHP on my website that uses the mail() command, and the recipients of these emails get a "Gmail couldn't ...
1
vote
1answer
35 views

Can DHIS2 provision users in advance and then have them log in using OAuth2?

We are looking at using DHIS2 as the data mart/dashboard backend for an application we are built. Its great that it has OAuth2 built in which makes it easy for us to allow SSO for a user. However is ...
1
vote
1answer
12 views

Why can't I login to my wordpress at home?

I don't have the same issue in the office but when I try to login at home, it keeps on saying "too many redirects". I'm not very good at this FTP thing so can anyone help me what to do? I've tried ...
2
votes
0answers
536 views

Apache basic authentication without instant prompt for credentials

I'm looking for away to eliminate the intrusive instant prompt for credentials when basic authentication is used and instead serve a nice page that tells the user where he is and what credentials to ...
0
votes
1answer
27 views

PHP syntax issue [closed]

I'm reading a Sentry tutorial for implementing an authentication workflow in a webapp. I'm a PHP beginner. There's a thing I don't understand in this code: <?php // set up autoloader require ('...
6
votes
0answers
73 views

Automatic reauthenticate at oauth2 endpoint

I am currently (ab)using an oauth2 endpoint of an API to enable users of the API to login to my site (using response_type=code). I do not save refresh tokens or even access_token as that oauth2 ...
3
votes
1answer
82 views

Does requiring login to access content hinder SEO?

I am wondering what the SEO effects of a 'Login Wall' is. More specifically, we have content that is region specific, so for instance a URL could look like www.example.com/content/Canada/Ontario. This ...
4
votes
2answers
502 views

SEO Impact on presenting User details without login

I am looking to develop a functionality on our website in which i can a show user their name based on cookie data. There will be no login required. we will retrieve user's name based on the previous ...
4
votes
2answers
542 views

Can basic HTTP password authentication interfere with CDN access?

I'm doing my best to ask this question, I'm stepping across domains here to cover for another team that is MIA on this task. Please guide me if the question sounds stupid. We are dealing with a ...
1
vote
0answers
17 views

Can I get email id, which email id is used to login in webmaster? [closed]

Can I get email id, which email id is used to login in webmaster... please help... We Have all email id and passwords @admin... But I dont know which is used to login webmaster... What I can do in it.....
0
votes
1answer
280 views

Is it possible to create a full SEO website with Firebase?

I work a lot with PHP, and as many of you know, you have a lot of flexibility when it comes to creating dynamic pages. You have sessions for authentication, database queries, etc. But the most ...
0
votes
1answer
493 views

Googlebot not respecting HTTP basic auth

I have basic auth set up and it has always worked. Suddenly Google started crawling my pages. The auth is still there (I have checked it using different browsers). I am at a loss how it's possible. ...
1
vote
1answer
57 views

How to detect the server has logged out the user from the client side?

For performance reasons I'm setting some user info in the local storage of the client/navigator when he logs in. It allows me to tune the pages appearance (show/hide menus, display the name of the ...
4
votes
1answer
68 views

Website Prompting Username and Password for Authentication on Debian Apache WebServer

I am attempting to host my own website with an Apache web server on Debian, but have reached this problem. When I try to go to my site at example.com it immediately asks for me to authenticate with a ...
0
votes
1answer
40 views

Is it OK for SEO to create tutorial documentation pages on my website that are only shown to logged in users?

I'm thinking to create tutorial pages (visible only if logged in) for my client. Using same CMS database. My question is, is this bad for SEO? should I tell robots to ignore these pages?
0
votes
1answer
24 views

How to log-in with more rights than Admin or Bureaucrat?

I'm having a heck of a time with MediaWiki and an Internal Server Error. I'd like to log-in with more privileges than afforded by Admin and Bureaucrat in hopes of actually being able to save a page. ...
1
vote
1answer
30 views

Verifying that a user is from a certain country

I'm helping a small non-profit with their website and we are going to have a login and membership system where we need to verify that a user is from a certain country. How can this be done? We are ...
0
votes
1answer
419 views

How to require user login using htpasswd within the htaccess file?

I'm trying to require users to login and would like to handle the request with htpasswd in the htaccess file: Any ideas on how I can do that?
0
votes
0answers
39 views

How to test web apps with microsoft login on local network

I'm making a web app for mobile that needs to rely on microsoft authentication. So I registered the app under https://apps.dev.microsoft.com/#/appList, and it works fine when I allow http://localhost:...
3
votes
1answer
61 views

Best way to respond to an authentication request via HTTPS

I'm implementing a very simple authentication scheme. Username:Password are sent (via header of an HTTPS POST request) to a PHP file on an Apache server that checks whether that combination is in a ...
0
votes
0answers
212 views

Single Page Web App - Auto-login security conundrum

We have a single page web application written in Angular with a Java back-end. It is public facing and as part of the security model we use https, JWT tokens and take csrf measures. Occasionally, a ...
7
votes
2answers
5k views

More Secure NGINX Authentication than auth_basic

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently ...
2
votes
1answer
37 views

Is it reliable to rely on external authentication providers in the long run?

We use Google+, Facebook and Twitter oauth2 APIs for our membership infrastructure, because our content policy strictly prohibits standalone ownership of content by user (means that there is no ...
0
votes
2answers
334 views

AdSense on pages for logged in users with different content for each user

Is it possible to show AdSense to logged in users when each user sees different content? I'm developing an application where each user sees the content that they have entered. The ads would be ...
3
votes
1answer
378 views

Access Google Analytics without original login credentials

Our Google Analytics administrator has forgotten the login credentials for our account. How can we recover this?
6
votes
1answer
56 views

Can't login or edit on 3 wordpress sites from a particular Windows PC

I have 3 wordpress.org sites and I have problems logging in and/or editing all three from one particular laptop (Win 7 Home Premium). It is puzzling. I can load regular pages from the sites OK. The ...
0
votes
0answers
30 views

Bingbot access urls from paypal transactions (Solved) [duplicate]

I log all transactions in the process of a paypal payment. If a user comes back from paypal, a unique token and PayerID is attached as GET query parameter by paypal. Today I noticed that bingbot ...
1
vote
1answer
22 views

How do you deal with users who no longer have access to their login email?

I run a reasonably sized web application and from time to time I get users who for various reasons lose access to the email address they originally registered with. The user will typically make a ...
2
votes
1answer
2k views

Wordpress keeps redirecting to non-existent wordpress directory

I've uploaded WordPress to my GoDaddy and when I go to example.com/wp-login.php to login page looks bare. I would expect to see the styled default WordPress login page and secondly when pressing ...
0
votes
1answer
414 views

HELP! my login session is returning the users password instead of their username! [closed]

I have my code set up to display the username in the nav bar however its displaying their password? nav.php <li> <a href class="userName"><?php echo $_SESSION['userName'];?></...
0
votes
1answer
85 views

Does Cloudflare use different authentication mechanisms across platforms?

I'm using Cloudflare flexible SSL for a website I made, and after investigating certificate properties, I realized different authentication mechanisms are being used. Chrome 45 for Windows desktop ...
3
votes
1answer
123 views

How to secure database access

I am developing a personal web-site with a lot of relatively sensitive (genealogical) information stored in a MySQL database. The site engine is written in PHP. So far (prototype phase) I have only ...
0
votes
1answer
43 views

wgSecureLogin setting

According to MediaWiki's Extension:HttpsLogin: From MediaWiki 1.17, you can redirect all users to HTTPS on login by: setting $wgSecureLogin = true; and setting $wgServer as protocol-...
1
vote
3answers
2k views

htaccess , htpasswd and error 401

I have a problem with htpasswd. I get an error in error.log apache2 user admin: authentication failure for "/": Password Mismatch Content of my htaccess file: # Set Access Restrictions ...
1
vote
2answers
4k views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
2
votes
1answer
89 views

CAN-SPAM and transactional emails without legitimate physical address (for foreign webmaster)

Situation I am a very small time web developer working on a personal web project. This website will be sending only two types of emails, a email validation email and a forgot password email. I do ...
0
votes
1answer
385 views

Logging using Microsoft account

I would like to create WordPress website with forum where people will be able to login with Microsoft account. I would like to do this to authorize their GamerTags from Xbox Live. Is that even ...
3
votes
2answers
496 views

Limit access to rewritten uri based on IP address

I'd like to limit access to a Drupal 7 registration page (/user/register) from certain IP addresses. I've tried to set the apache directive, but it's still letting me access it from an IP that isn't ...
2
votes
2answers
2k views

How do I automatically log my users into other websites after they have given me their passwords?

I have to program an application where the users can connect to other websites. For example, the user clicks on the "Amazon" button and the application opens the Amazon website. It then needs to pre-...
0
votes
1answer
107 views

http-basic auth, else placeholder-page

Is it possible to show a http-basic-auth, and when someone fails that test, show a certain HTML-placeholder-page? If so, how can I achieve that?
2
votes
0answers
88 views

mod_ident not to be trusted? [closed]

I'm looking at Apache's mod_ident: http://httpd.apache.org/docs/2.2/mod/mod_ident.html However, on this page it has the following disclaimer: The information should not be trusted in any way except ...
8
votes
1answer
245 views

What do I need to do to make my site compatible with Safari's iCloud Keychain so that it saves passwords?

I've noticed that a vendor's web application triggers Safari's "suggested password" feature at "create password" forms, but does not actually save this password when the form is submitted. That is, ...
1
vote
1answer
117 views

How to require approval to signup new Bluespice MediaWiki accounts?

On a MediaWiki site running BlueSpice, how can I require that all new account sign ups be approved before the account is created? I tried adding the ConfirmAccount extension described here, but now ...