![]() More like, the application itself needs a concept of users and privileges granted to certain groups of users, and so we need to prompt the user for a user name and a password. Accessing a SQL Server database? Use Windows Authentication! Windows Auth not possible? Use SQL Authentication over a secure network! App authentication isn’t for authenticating a user with a server. The vast majority of scenarios don’t need any custom authentication. ![]() Unfortunately, it’s also a problem that’s too often solved with naive, “good-enough” solutions that make any security expert twitch. It’s also a solved problem, with a fairly standard solution. ![]() Authenticating the user of our application is a common problem, with common pitfalls – some innocuous, some fatal.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |