Implementing "Remember Me"/"Forgotten Password" Functionality
How do you implement your "remember me"/"forgotten password" functionality? Here's what we're doing right now . . .
An OO Roles Based Security Model
I just wanted to throw out an approach I’m using for roles based security for OO applications to see if anyone had any thoughts or better ideas . . .
What IS Authentication? Are Users the Only thing we should Authenticate?
Authentication is the process of establishing identity. In the context of web based systems, authentication is typically based on one or more tokens (usually two or more) such as a username and password.
A more interesting question is WHAT can be authenticated? I know I can authenticate a site visitor as a user, but what about authenticating them against a company, an order or an article? . . .
