Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [login]

The tag has no usage guidance.

1
vote
0answers
33 views

So I am creating a user registration system with oauth login to four services. How do I handle username selection?

My registration system normally asks for 4 things: The user's full name, their email, their preferred username, and a password. I want to add four oauth2 registration services to make it easier and ...
-1
votes
2answers
78 views

How to process a login form data?

I have created a login form for my website, but the issue is how to process the data provided in the form by the uses. You see, I can't just write a basic function like this one - myfunction(){ if(...
2
votes
1answer
72 views

Architecture - Whether/Where to store 3rd party IDs

I've got an application where users can log in with varying levels of permissions. From their client they send a username & password to the front end, which passes it to the back end, and from ...
1
vote
1answer
49 views

Should I separate the REST sessions from the sessions in the rest of the application?

Assuming I have resources I restrict access to with a username + password login in my web application and in my REST API. Should I keep different sessions for both meaning that a login via the web UI ...
0
votes
1answer
58 views

Single-sign-on login logic and application logic on front-end

Let's say I have multiple Angular/React/Vue applications which I want to enable users to log in once and be able to access all my applications. What I want to solve / ask about is where should I keep ...
1
vote
1answer
70 views

User identity and microservices

I have created a User service that controls user login using OAuth2 protocol and stores the user in the local database. So this service is aware of the user session and user identity. Now I have ...
0
votes
1answer
104 views

Advantages/Disadvantages disallowing non ajax login requests

On the project I'm working on, I noticed that on login there is a check in backend which checks if the request is an ajax reques (checks 'X-Requested-With: XMLHttpRequest') or not. If the request is ...
0
votes
1answer
68 views

Login to application based on profile created on another application

I have a "difficult" problem that i am not sure how should i approach it. Basically i have a mobile app, that has a server side (in Go) and the appropriate base (PSSQL). User can register via the ...
1
vote
1answer
774 views

Clean Architecture : Google/Facebook Login and data layer

I'm trying to find a way around the integration of Google and Facebook login for an Android application using the Clean Architecture. My application has 3 Android Studio modules : presentation : ...
1
vote
2answers
752 views

What is the right approach to save user agent info during login to web / app?

As you know Facebook saves login sessions and we can see them in settings where we've logged in. Now, they show IP address, Phone name (if logged in with phone) and App name in the phone and Browser ...
2
votes
0answers
809 views

How to store unique sessions for logged in user(s) with different devices?

I want to do something like Facebook does. We can see any time where we're logged in. e.g.: Windows PC · New Delhi, India Edge · Active now Windows PC · New Delhi, India Chrome · 8 minutes ago ...
-1
votes
1answer
51 views

User authentication in app

I want to create a mobile quiz app where users can sign up and compete against each other. For the signup I am just using username/password combination. I want to ask you what are good ways to store ...
-2
votes
1answer
42 views

Link users from different web apps

We have a PHP based web application with a lot of project data. All of our customers have a dedicated instance of this application. Now we want to allow a very limited access to some third party ...
0
votes
3answers
149 views

Handling one-user-only applications

I am planning creating a small personal blog application that handles only one user - the content author, let's call that user admin. There would not be any registration option, only a hidden login ...
-1
votes
1answer
69 views

Options for handling logins?

Front end developer here... I am working with a teammate to create a simulation game. We would like to allow users to create and account (we were going to handle this through local storage or cookies)...
-3
votes
1answer
54 views

Login Register Page for Anroid

I have a mysql database in server, storing user accounts information (username and password). I'm developing the Android login/ register page for an app. When the app is first loaded on client ...
8
votes
4answers
367 views

email address as username, and email address field

I'm designing an entity to represent a log-in object. The unique username value is an email address, that will go onto the username field. Should I add a second field called email to indicate a ...
2
votes
0answers
831 views

Database structure for combaning local login with social login

I'm implementing a platform where users can create an account with my system and use it to login. Also I allow them to add any external login (social login) such as Facebook, Google, Twitter and so on....
2
votes
2answers
194 views

Multiple tables with same name, but each with a unique id to distinguish them?

I'm trying to code a dice game where users log in and then challenge each other. I already made a version of this game without login but only one game could be played at a time. So now, there will be ...
5
votes
1answer
207 views

Log off system on all devices

On websites like Facebook and Twitter, you've got a function to log off on all devices. How does it work? Does it work with IP addresses or something? What happens when you login on a device and use ...
0
votes
1answer
601 views

How to create a single login service to use it in multiple sites ? (similar to Google, Microsoft Account)

I want to implement login system where same user account can be used to login in different web applications. How can I achieve this ? I want to make a similar architecture to Google and Microsoft ...
2
votes
2answers
117 views

How can I tell if a web sign up form actually encrypts my password?

Recently I signed up for new account for a service provider's web site. I entered the usual the name, email , password (strong) , repeat password and I was signed up. Great everything works well. A ...
6
votes
1answer
2k views

Can I prevent CSRF attacks by using localstorage/sessionstorage?

I have a front/back applications that needs to be logged in to be used. When I log in (by means of the front-end app sending a request to the back end), what I do is not sending a cookie, but a JSON ...
1
vote
2answers
338 views

Where is password hashing/salt logic applied?

I went through a PHP/JS tutorial on user registration with secure hashing (no salt though) using sha. What I didn't understand is why the hash was generated on the client. Also, I don't understand the ...
-1
votes
2answers
1k views

Registration form with email verification

Can someone point me in the right direction: I need to make a website with a registration form, to create accounts with e-mail verification, to write the forms content in a database table or something ...
0
votes
2answers
852 views

Handling delay in entry of OTP for log in validation

There's an application, which accepts a user id and password to login. Validation of the id and password is processed by another system. Now after password validation, the application generates a One ...
3
votes
2answers
2k views

Simple React application design

I have a very simple app that lets you log in and then displays a dashboard. The design process with React and Redux is very simple : I have two React components : Login and Dashboard I store a ...
3
votes
1answer
813 views

How should I store usernames and passwords for user login using php/cassandra?

I am new to NOSQL and Cassandra. I am not sure if I should store usernames and password in Cassandra. If I should, what is the best way to do that? I am getting lots of conflicting ideas from research....
1
vote
2answers
3k views

Is providing a user login a functional requirement of a system?

Is providing a user login a non functional requirement? Since this is concerned with security which is a non functional requirement, I feel that providing a user login is also non functional but ...
1
vote
1answer
183 views

Access rights through database table

I made a login system with access rights (ASP.NET WebForm) and I store the info's in a database table. I don't use the built in feature of asp.net like Forms authentication and webconfig. My question ...
1
vote
1answer
54 views

How can I cleanly handle a several permutations of Resource Request, (Optional) Login Control, Resource Result?

Whenever a user interacts with a resource while not logged in, I need to: Redirect them to a secure page. Show a signup/login dialog (which is usually partially customized based on the resource, ...
4
votes
1answer
6k views

How should I pass login data from client to server using REST API

I want to create a new session, the new session will be created by logging in (naturally). Should I pass the username and password: via URL (POST request to session?username=:username&password=:...
0
votes
1answer
84 views

API call to login from a link in email

I am trying to make a something like a shopping cart. I want to add a feature, that if a person adds a product on website but does not purchase the item, i will send him an email with a link. If the ...
1
vote
1answer
114 views

How should I distribute a login key?

Our application currently generates "invitation" emails containing an encrypted personId in the query string of an https link. When the recipient clicks the link, the application validates the ...
5
votes
1answer
813 views

How can I build a seamless login for multiple sites using OAuth2?

The question is admittedly a bit leading, but what I mean to ask is: If a user logs into into site X, is there a way to automatically log into site Y? Site Y utilises single sign-on via OAuth2 ...
2
votes
1answer
251 views

How do you implement an active sessions system like LinkedIn? [closed]

With some platforms, like LinkedIn, you can see a list of all sessions where you are logged in, and you can even log them out on a distance. How would you implement something like that? I'm not ...
0
votes
3answers
1k views

What is a login-queue?

some of you should know what a login queue is. You start your game, like world of warcraft, league of legends, ..., type in your username and password, klick "log in" and then it happens: Login Queue, ...
0
votes
1answer
45 views

How to create work for a client on login

I have a log-in service that runs a CPU-intensive hash multiple times when a user logs in. In order to reduce the effect of a login DDOS, is there any sort of function that I can "ask" that the client ...
3
votes
3answers
560 views

Phone Number based Login

I'm trying to implement a phone number based login and not sure if I should ask the users for full number, i.e country code + number or just the number. What I have in mind so far: Attempt ...
1
vote
0answers
114 views

Implement SSO login with or without Membership

I need to implement SSO for four different domains, say abc.com pqr.com sql.com xyz.com Now, I have already login system for two of my applications using Membership. But now requirement is changed, ...
0
votes
2answers
829 views

Authentication with If/Else

For keeping the "Administration Panel" secure to those who are logged in, for my web application, is the best practice to use an If/Else Statement? if($_SESSION['logged_in'] == true) { include '../...
4
votes
1answer
242 views

Can someone explain the behind-the-scenes process of connecting an app account to a Facebook account?

I am developing an app that will use the Twitter and Facebook login APIs exclusively. Suppose a new user downloads the apps and is presented with the option to log in through Facebook or Twitter. The ...
1
vote
4answers
4k views

How do login systems work? [closed]

I assume that when a user registers at a site, the password and username are stored inside of a database. I've read that the password is often encrypted using a salt. So, is it safe to encrypt the ...
1
vote
4answers
343 views

Is just using an email address for login a good idea?

Many a times I need to log into a website that I used months ago and have forgotten my password. So clicking the reset password link and the site sends me an email with a single use link which allows ...
0
votes
1answer
535 views

Why can't we use unique identifier as combination of email and password? [closed]

For prevent email conflicts for authentication system we can surely choose email and password combination as unique identifier. What can prevent me to built authentication system by treating unique ...
3
votes
1answer
516 views

Handling multiple login methods

Currently, I'm using Parse to handle my backend, and I have multiple ways to login -> via regular email/password and via linkedin. Parse has a specific method of logging in requiring username/...
11
votes
7answers
1k views

Why do modern websites still insist on archaic username/password requirements? [duplicate]

I was signing up for a website last night, and once again was greeted with the fact that my username cannot contain certain characters (including spaces), and neither could my password. Is there a ...
0
votes
1answer
96 views

Patterns for maintenance login

Are there any reliable strategies to implement a login mechanism that will allow access to an application for maintenance purposes? Kind of like how some routers have a list of default logins that ...
2
votes
1answer
156 views

Do you encourage to keep login credential in keystore?

When developing login module for a web application, do you suggest to keep the username and password in a keystore? Lets assume the keystore was kept in a very safe place in web server.
2
votes
1answer
948 views

User Authentication & Session Management

One of the fundamental ways of handling user login authentication & session management is by storing variables in Session space plus setting some data in cookies on client computer while sometimes ...