Tag Info

New answers tagged


I thought the AFT in the cookie and the one in the form were supposed to match. You were wrong! they doesn't need to be equal - However, they have some cryptographic relations with each other... Here you can find detailed info about this feature and how it works...


Authentication by forms is still the norm. However, you may want to consider allowing your users to take advantage of a single sign solution. For instance: OpenId Try rolling your own SAML (a single sign on protocol) based solution. Keep in mind that this just let's your user share their sign in with another service. At some point they will have to ...

Top 50 recent answers are included