Comments on: Under the hood: Not-so-basic authentication

By: processing credit cards

processing credit cards — Thu, 10 Sep 2009 13:35:40 +0000

It’s simple for an example, but don’t think that’s all there is to basic authentication. There’s nothing to stop you comparing against values in a settings table or even doing a user lookup à la RESTful authentication.

Thanks and Regards

By: Coaching London

Coaching London — Sat, 05 Sep 2009 14:06:40 +0000

I think that the solution works good (so long as you close your eyes when looking at the passwords stored in the PL/SQL). The need for an ORACLE wallet is a bit smelly but that seems to be just how it works. One thing I did miss about that is the wallet needs to be stored in a location the server

By: Hampers

Hampers — Fri, 14 Aug 2009 18:26:40 +0000

As a newbie to this designing and coding world, it's an awesome find to mingle with great minds here. May I take this opportunity to ask, is there a way to make things as simple as ABC especially if we are dealing with an error logging in and instead of going back from scratch, there should be a message of where the error lies so users will not go all over again: typing from the very beginning?

By: andrewskegg

andrewskegg — Thu, 30 Jul 2009 13:06:46 +0000

There must be some strange behaviour going on with Safari, since I can get Rails to logout but revisiting the protect page and it let's me right in.

Still – the admin links are hidden, and the auth is destroyed when the browser quits, so it's not all bad.

Of course, nothing beats proper authentication rather than digest.

By: Aimee

Aimee — Wed, 08 Apr 2009 23:10:18 +0000

I'm glad it helped you out. Hopefully it shows that there is much more that can be done with basic authentication than people sometimes realise.

Let me know if you post a follow-on. I'll be interested to read it.

By: Carey

Carey — Sun, 29 Mar 2009 20:08:51 +0000

Fantastic! Solved an immediate problem for me.

I wouldn't mind if the example was more pedantic, and more generic. I may post that on my blog.