remember-me

Via Remember me always return false

落花浮王杯 提交于 2019-12-06 05:05:21
Before I posted this, I did some searching but still I don't know it always return false. My code is below html <input type="checkbox" name="remember"/> {{ trans('login.text_remember_me') }} controller $remember = ($request->has('remember')) ? true : false; if (Auth::attempt($credentials, $remember)) Then after successful logged-in. I checked the dd(Auth::viaRemember()); and it return false. Even changed my config/session.php setting 'expire_on_close' => true from false . Basically what I want is when the user tick the remember me checkbox I will set the session lifetime to 3 days else to 1

Grails - Spring security plugin ldap: remember me not working

丶灬走出姿态 提交于 2019-12-06 04:13:21
I have a Grails application with spring-security-ldap plugin installed and configured with Active Directory specific options. Grails version: 2.1.1. spring-security-core plugin version: 2.0-RC2 spring-security-ldap plugin version: 2.0-RC2 Everything works fine: users log in to the application validating against the Active Directory and their groups are retrieved in order to control the access to the different pages. My problem: "remember me" option doesn't work. I have configured the application in order to use "remember me" option and I have run the s2-create-persistent-token command. I have

remember_me with warden

混江龙づ霸主 提交于 2019-12-06 02:29:43
问题 For my lastest project I'm using https://github.com/hassox/rails_warden. It suits my needs very well except that I can't find a good way to implement remember_me. I know that it's notoriously difficult to get remember_me right from a security point of view so I'm hoping there's a project out there that will do the job. Anyone seen anything or get a good idea? 回答1: Devise, which is an authentication solution on top of Warden, has a rememberable implementation. 回答2: Ok here's how I solved it #

Database problems when allowing multiple browser persistent log ins

怎甘沉沦 提交于 2019-12-05 20:04:24
I am trying to implement a 'remember me' system with cookies that will remember a user across browsers meaning that if a user logs into a website using browser A and checks 'remember me', and then logs into browser B using 'remember me', he will continue to be automatically logged in regardless of which browser he uses. (checking 'remember me' in browser B will not break his persistent login in browser A). To do this, I set up my database so that multiple keys can be stored alongside a user id. When a user logs onto my website, the cookie's value is checked. If that value is found in the

ASP.NET MVC Remember me

北城余情 提交于 2019-12-05 19:06:01
I've got a project based in ASP.NET MVC 4 that simple authentication. I'm trying to get my site to automatically log the user in when they check the remember me checkbox. However I'm having problems getting this working. After closing down the browser and reopening it the user is never logged in. After checking ( http://forums.asp.net/t/1654606.aspx#4310292 ) I've added a machine key in, generated by IIS. I've set automatically generate at runtime and generate a unique key for each application have both been disabled and I've Generated Keys). Unfortunately this hasn't worked. Looking at

How to administratively invalidate a session that used “Remember Me” option?

ⅰ亾dé卋堺 提交于 2019-12-05 14:41:58
I'm using Symfony 2.1.6 and PdoSessionStorage. I'm trying to add the same functionality that Facebook has to my application where you can show a user all the active sessions they have with the website (showing device type and location based on IP) and allow them to end any session if it looks suspicious. Deleting the record from the PdoSessionStorage table doesn't work as the record is re-created automatically by Symfony again as soon as I perform activity again in that session (instead of Symfony detecting that the session was already removed and thus forcing the user to re-authenticate). Is

Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack

人走茶凉 提交于 2019-12-05 13:27:55
org.springframework.security.web.authentication.rememberme.CookieTheftException: Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack. at org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices.processAutoLoginCookie(PersistentTokenBasedRememberMeServices.java:102) at org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices.autoLogin(AbstractRememberMeServices.java:115) What I notice is that the processAutoLoginCookie method gets called twice. The behavior of the method itself seems to be

How can I listen for “remember me” reauthentication events in Symfony2?

余生颓废 提交于 2019-12-05 09:37:21
Using “normal” — not “remember me” authentication — I can set a success and failure handlers, adding this to the security.yml file: form_login: # ... success_handler: authentication_handler failure_handler: authentication_handler But I couldn't find a way for listening for “remember me” reauthentication, when a user's session is expired and a “remember me” cookie is used to reauthenticate again. Any ideas on how can I achieve this? nezuvian Create a Listener for the security.interactive_login event. That gets triggered on both simple and "remember me" logins (see Symfony\Component\Security

Difference between creating a session and a cookie?

感情迁移 提交于 2019-12-05 09:04:54
I'm working on my first website with the Play! framework, and at one point I'm calling this method when the user logs in: static void connect(User user){ session.put("userid", user.id); } Simply storing the userid in a session, and I can check if it's set on each request, works fine. Problem is, once the browser is closed the cookie is lost, and the user needs to login again. I want to create a "remember me" option, and it seems that the only way to do that is create a cookie and send it with the respons, like this: response.setCookie("user", userdata, "14d"); So I'm wondering, what's the

symfony 3.3 programmatically login a user with remember me feature

不羁的心 提交于 2019-12-04 22:41:13
I want to login a user after registration successfully. Currently the solution I found online is login a user in a session basis. But I need the "remember me" feature. My research lead me to the Symfony\Component\Security\Http\RememberMe\TokenBasedRememberMeServices and its function onLoginSuccess But I'm out of luck and end up with circular reference detected for service. Also the onLoginSuccess is protected function. I assume I can duplicate those functions in my own function where performing a login feature. But that's always not a good choice. So I'd like to learn if anyone had experience