Never Give Your Information To 10 Minute Old Startups

Re:Never Give Your Information To 10 Minute Old Startups by thisone on Saturday October 06, 2012 @06:34AM (#4620236)

it's something someone would do who's never worked with authentication and authorization before and doesn't have the fallback of a professional tester (aka breaker).

As people have mentioned, rails doesn't have it built in. I've used gems to provide it since I don't trust myself to write good enough security algorithms (and really, why reinvent the wheel if I don't have to).

In .net we can use the asp.net membership. But you've always got to have that authorization part, which I think can get forgotten about unless you've got a system under you belt or something/someone to crib from.

Sometimes you just don't think, and sometimes it becomes very public.

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by sergiotapia on Saturday October 06, 2012 @10:02AM (#4620537)

In .NET you can protect controller action methods using `[Authorize]` data attribute above each method.

You can even create your own custom filters.

http://www.youtube.com/watch?v=BsxUsyMSGeA

Just letting you know. :)

[ Parent | on HN ]

Re:Never Give Your Information To 10 Minute Old Startups by thisone on Monday October 08, 2012 @02:46AM (#4625776)

indeed, aren't specifics, wonderful.

However, I do think that authentication is where people may believe they can stop, forgetting or maybe not understanding, that authentication really doesn't do much, without an authorization system.

[ Parent | on HN ]