Questions tagged [login]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

Implementing login sessions in SwiftUI-WebView app that connects to web service

I am in the process of developing a business app for iOS using SwiftUI, that will have CRUD operations to logged in users. Most of the functionality will be provided using a webview (with WKWebView), ...
73
votes
4answers
9k views

What is the purpose of identifier-first login screens?

Companies like Google and Microsoft use identifier-first screens: where you provide your identifier (like an email) before providing the password. Why is this done, is this somehow more secure? I'm ...
0
votes
1answer
79 views

How to use auto-login for an API when building a desktop app?

I am currently building a small application which used a public API to get some information. The API doesn't support auto-login in any way (don't know if something like this even exists with APIs), ...
2
votes
1answer
125 views

Good/clean practice for building the auth part of an application

I'm starting on a greenfield project and haven't done or architected the sign-up/sign-in and auth part of the backend in a very long time, so my knowledge on the nowadays' good practices is very ...
-1
votes
3answers
506 views

How should I manage SQL Server logins for a desktop application?

I'm looking for a bit of guidance or someone to point me in the right direction. I have a C# WPF desktop application which accesses a local SQL Server Express database. The application is on a single ...
0
votes
1answer
1k views

Async - why have an async for a login?

C# web scaffolding has an async call for every member. Why? For example: Async for a login call makes no sense. User has to wait for validation. What else would the app do until the application ...
1
vote
1answer
94 views

OAuth2.0 Grant Type for User Logged In With Google

I have a confusion. So, in OAuth2.0 there are 4 types of Grant (Authorization Code, Password, Client Credentials and Implicit). In my use case, I have two login scenario. The first one is using ...
3
votes
3answers
1k views

Best approach to creating a secure offline login system in C#?

I'm rather new at programming so I'm still getting a grip on things. I'm creating an offline login system in C# that will have the ability add/remove users. The computer will not be connected to the ...
0
votes
1answer
331 views

Is it a good idea to allow multiple account login (in the same browser)

I am implementing Authentication from scratch (php). I reached a point where I have different types of users (admin, author, editor etc.) After dealing with this, I realized I can allow multiple ...
4
votes
2answers
1k views

So I am creating a user registration system with oauth login to four services. How do I handle username selection?

My registration system normally asks for 4 things: The user's full name, their email, their preferred username, and a password. I want to add four oauth2 registration services to make it easier and ...
-1
votes
2answers
450 views

How to process a login form data?

I have created a login form for my website, but the issue is how to process the data provided in the form by the uses. You see, I can't just write a basic function like this one - myfunction(){ if(...
2
votes
1answer
171 views

Architecture - Whether/Where to store 3rd party IDs

I've got an application where users can log in with varying levels of permissions. From their client they send a username & password to the front end, which passes it to the back end, and from ...
1
vote
1answer
63 views

Should I separate the REST sessions from the sessions in the rest of the application?

Assuming I have resources I restrict access to with a username + password login in my web application and in my REST API. Should I keep different sessions for both meaning that a login via the web UI ...
0
votes
1answer
361 views

Single-sign-on login logic and application logic on front-end

Let's say I have multiple Angular/React/Vue applications which I want to enable users to log in once and be able to access all my applications. What I want to solve / ask about is where should I keep ...
2
votes
1answer
678 views

User identity and microservices

I have created a User service that controls user login using OAuth2 protocol and stores the user in the local database. So this service is aware of the user session and user identity. Now I have ...
0
votes
1answer
153 views

Advantages/Disadvantages disallowing non ajax login requests

On the project I'm working on, I noticed that on login there is a check in backend which checks if the request is an ajax reques (checks 'X-Requested-With: XMLHttpRequest') or not. If the request is ...
0
votes
1answer
77 views

Login to application based on profile created on another application

I have a "difficult" problem that i am not sure how should i approach it. Basically i have a mobile app, that has a server side (in Go) and the appropriate base (PSSQL). User can register via the ...
6
votes
1answer
3k views

Clean Architecture : Google/Facebook Login and data layer

I'm trying to find a way around the integration of Google and Facebook login for an Android application using the Clean Architecture. My application has 3 Android Studio modules : presentation : ...
3
votes
2answers
2k views

What is the right approach to save user agent info during login to web / app?

As you know Facebook saves login sessions and we can see them in settings where we've logged in. Now, they show IP address, Phone name (if logged in with phone) and App name in the phone and Browser ...
3
votes
0answers
1k views

How to store unique sessions for logged in user(s) with different devices?

I want to do something like Facebook does. We can see any time where we're logged in. e.g.: Windows PC · New Delhi, India Edge · Active now Windows PC · New Delhi, India Chrome · 8 minutes ago ...
-1
votes
1answer
55 views

User authentication in app

I want to create a mobile quiz app where users can sign up and compete against each other. For the signup I am just using username/password combination. I want to ask you what are good ways to store ...
-2
votes
1answer
46 views

Link users from different web apps

We have a PHP based web application with a lot of project data. All of our customers have a dedicated instance of this application. Now we want to allow a very limited access to some third party ...
0
votes
3answers
156 views

Handling one-user-only applications

I am planning creating a small personal blog application that handles only one user - the content author, let's call that user admin. There would not be any registration option, only a hidden login ...
-1
votes
1answer
76 views

Options for handling logins?

Front end developer here... I am working with a teammate to create a simulation game. We would like to allow users to create and account (we were going to handle this through local storage or cookies)...
-2
votes
1answer
75 views

Login Register Page for Anroid

I have a mysql database in server, storing user accounts information (username and password). I'm developing the Android login/ register page for an app. When the app is first loaded on client ...
7
votes
4answers
451 views

email address as username, and email address field

I'm designing an entity to represent a log-in object. The unique username value is an email address, that will go onto the username field. Should I add a second field called email to indicate a ...
3
votes
0answers
2k views

Database structure for combaning local login with social login

I'm implementing a platform where users can create an account with my system and use it to login. Also I allow them to add any external login (social login) such as Facebook, Google, Twitter and so on....
2
votes
2answers
214 views

Multiple tables with same name, but each with a unique id to distinguish them?

I'm trying to code a dice game where users log in and then challenge each other. I already made a version of this game without login but only one game could be played at a time. So now, there will be ...
5
votes
1answer
235 views

Log off system on all devices

On websites like Facebook and Twitter, you've got a function to log off on all devices. How does it work? Does it work with IP addresses or something? What happens when you login on a device and use ...
0
votes
1answer
850 views

How to create a single login service to use it in multiple sites ? (similar to Google, Microsoft Account)

I want to implement login system where same user account can be used to login in different web applications. How can I achieve this ? I want to make a similar architecture to Google and Microsoft ...
2
votes
2answers
120 views

How can I tell if a web sign up form actually encrypts my password?

Recently I signed up for new account for a service provider's web site. I entered the usual the name, email , password (strong) , repeat password and I was signed up. Great everything works well. A ...
12
votes
1answer
6k views

Can I prevent CSRF attacks by using localstorage/sessionstorage?

I have a front/back applications that needs to be logged in to be used. When I log in (by means of the front-end app sending a request to the back end), what I do is not sending a cookie, but a JSON ...
0
votes
2answers
409 views

Where is password hashing/salt logic applied?

I went through a PHP/JS tutorial on user registration with secure hashing (no salt though) using sha. What I didn't understand is why the hash was generated on the client. Also, I don't understand the ...
-1
votes
2answers
1k views

Registration form with email verification

Can someone point me in the right direction: I need to make a website with a registration form, to create accounts with e-mail verification, to write the forms content in a database table or something ...
0
votes
2answers
2k views

Handling delay in entry of OTP for log in validation

There's an application, which accepts a user id and password to login. Validation of the id and password is processed by another system. Now after password validation, the application generates a One ...
3
votes
2answers
2k views

Simple React application design

I have a very simple app that lets you log in and then displays a dashboard. The design process with React and Redux is very simple : I have two React components : Login and Dashboard I store a ...
4
votes
1answer
1k views

How should I store usernames and passwords for user login using php/cassandra?

I am new to NOSQL and Cassandra. I am not sure if I should store usernames and password in Cassandra. If I should, what is the best way to do that? I am getting lots of conflicting ideas from research....
2
votes
4answers
8k views

Is providing a user login a functional requirement of a system?

Is providing a user login a non functional requirement? Since this is concerned with security which is a non functional requirement, I feel that providing a user login is also non functional but ...
1
vote
1answer
191 views

Access rights through database table

I made a login system with access rights (ASP.NET WebForm) and I store the info's in a database table. I don't use the built in feature of asp.net like Forms authentication and webconfig. My question ...
1
vote
1answer
57 views

How can I cleanly handle a several permutations of Resource Request, (Optional) Login Control, Resource Result?

Whenever a user interacts with a resource while not logged in, I need to: Redirect them to a secure page. Show a signup/login dialog (which is usually partially customized based on the resource, ...
4
votes
1answer
9k views

How should I pass login data from client to server using REST API

I want to create a new session, the new session will be created by logging in (naturally). Should I pass the username and password: via URL (POST request to session?username=:username&password=:...
0
votes
1answer
248 views

API call to login from a link in email

I am trying to make a something like a shopping cart. I want to add a feature, that if a person adds a product on website but does not purchase the item, i will send him an email with a link. If the ...
1
vote
1answer
119 views

How should I distribute a login key?

Our application currently generates "invitation" emails containing an encrypted personId in the query string of an https link. When the recipient clicks the link, the application validates the ...
5
votes
1answer
1k views

How can I build a seamless login for multiple sites using OAuth2?

The question is admittedly a bit leading, but what I mean to ask is: If a user logs into into site X, is there a way to automatically log into site Y? Site Y utilises single sign-on via OAuth2 ...
2
votes
1answer
293 views

How do you implement an active sessions system like LinkedIn? [closed]

With some platforms, like LinkedIn, you can see a list of all sessions where you are logged in, and you can even log them out on a distance. How would you implement something like that? I'm not ...
1
vote
3answers
3k views

What is a login-queue?

some of you should know what a login queue is. You start your game, like world of warcraft, league of legends, ..., type in your username and password, klick "log in" and then it happens: Login Queue, ...
0
votes
1answer
45 views

How to create work for a client on login

I have a log-in service that runs a CPU-intensive hash multiple times when a user logs in. In order to reduce the effect of a login DDOS, is there any sort of function that I can "ask" that the client ...
3
votes
3answers
1k views

Phone Number based Login

I'm trying to implement a phone number based login and not sure if I should ask the users for full number, i.e country code + number or just the number. What I have in mind so far: Attempt ...
1
vote
0answers
116 views

Implement SSO login with or without Membership

I need to implement SSO for four different domains, say abc.com pqr.com sql.com xyz.com Now, I have already login system for two of my applications using Membership. But now requirement is changed, ...
0
votes
2answers
1k views

Authentication with If/Else

For keeping the "Administration Panel" secure to those who are logged in, for my web application, is the best practice to use an If/Else Statement? if($_SESSION['logged_in'] == true) { include '../...