links.lmorchard.com - #authentication

Passwordless - A node.js/express module for token-based logins

Sun, 19 Oct 2014 03:34:06 +0000

Passwords are broken. Inspired by Justin Balthrop's article Passwords are Obsolete token-based one-time password (OTPW) authentication is faster to deploy, better for your users, and more secure.

Tags: #auth #authentication #imported:pinboard #nodejs #security

Passwordless - A node.js/express module for token-based logins

Sun, 19 Oct 2014 03:34:06 +0000

Passwords are broken. Inspired by Justin Balthrop's article Passwords are Obsolete token-based one-time password (OTPW) authentication is faster to deploy, better for your users, and more secure.

Tags: #auth #authentication #nodejs #security

Stormpath | Authentication and User Management for Developers

Thu, 23 May 2013 00:11:25 +0000

User Management and Authentication for Developers

Tags: #apis #authentication #authorization #gluecon #imported:pinboard #services #stormpath

Stormpath | Authentication and User Management for Developers

Thu, 23 May 2013 00:11:25 +0000

User Management and Authentication for Developers

Tags: #apis #authentication #authorization #gluecon #services #stormpath

gbraad/html5-google-authenticator

Mon, 01 Oct 2012 18:00:09 +0000

A simple Google Authenticator app written in HTML

Tags: #auth #authentication #google #html5 #imported:pinboard #security #webdev

Introducing django-lazysignup — Stereoplex

Wed, 08 Aug 2012 21:10:22 +0000

So I started wondering - what if we just created a real user for every person who visited the site? Django already has support for creating users with unusable passwords - so if we just create a user with an unusable password every time a new person comes along, log them in, and then at some future point (presumably once they've fallen in love with your site) they can set themselves up with a real username and password. And as a bonus, all that data that they created while messing about with the site sticks around, and carries over into their 'real' user.

Tags: #auth #authentication #django #imported:pinboard #lazuser #webdev

google-authenticator - Two-step verification - Google Project Hosting

Wed, 08 Feb 2012 00:34:17 +0000

The Google Authenticator project includes implementations of one-time passcode generators for several mobile platforms, as well as a pluggable authentication module (PAM). One-time passcodes are generated using open standards developed by the Initiative for Open Authentication (OATH) (which is unrelated to OAuth).

Tags: #authentication #crypto #google #security

binarylogic's authlogic at master - GitHub

Fri, 05 Jun 2009 18:43:23 +0000

"A clean, simple, and unobtrusive ruby authentication solution."

Tags: #auth #authentication #authlogic #plugin #rails #ruby #webdev

SitePoint » The Single Sign-On War Will Ruin OpenID

Fri, 05 Dec 2008 14:44:58 +0000

"Google and Yahoo! (and likely Microsoft to follow) are ultimately competing with one another to become the branded single sign-on solution for the web. The good news for users is that by using the same underlying technology, most relying parties will able to turn on support for any new OpenID provider fairly easily. The bad news for users is that since none of the major providers are also relying parties, using services at each of these site still requires multiple accounts. Further, a sign in box with 100 different logos for 100 different providers isn’t a great user experience."

Tags: #authentication #google #internet #openid #sso #webdev #yahoo

Open Authorization, Permissions, and Socially Enabled Security

Mon, 30 Jul 2007 17:47:41 +0000

"What if you could say, "by default, trust whatever my buddy Pete trusts"? Or, "trust the consensus of my set of friends; only ask me if there's disagreement"? Or more prosaically, "trust what my local IT department says"."

Tags: #auth #authentication #mashups #openid #webdev

XEP-0070: Verifying HTTP Requests via XMPP

Sat, 28 Jul 2007 00:16:00 +0000

"This document defines an XMPP protocol extension that enables verification of an HTTP request via XMPP."

Tags: #authentication #jabber #security #webdev #xmpp

Google Account Authentication

Wed, 28 Mar 2007 03:20:00 +0000

"To maintain a high level of security, the Authentication Proxy interface, AuthSub, enables the application to get an authentication token without ever handling the user's account login information."

Tags: #authentication #for:jwhiting #google #http #rest #webservices

How to turn your blog in to an OpenID

Fri, 22 Dec 2006 22:58:33 +0000

"Wouldn’t it be great if you could use the same account to log in to multiple sites and applications, without having to trust them all with your password?"

Tags: #authentication #identity #openid #security #webdev

HMAC Digest Access Authentication for HTTP

Tue, 04 Apr 2006 20:43:15 +0000

"This document specifies an HTTP authentication scheme based on cryptographic hashes."

Tags: #authentication #crypto #http #webdev

mnot’s Web log: Web Authentication

Fri, 17 Mar 2006 12:10:16 +0000

Tags: #authentication #http #rest #webdev