{"componentChunkName":"component---src-templates-blog-list-template-js","path":"/155","result":{"data":{"allMarkdownRemark":{"edges":[{"node":{"excerpt":"Are you afraid of hackers and feel unsafe for admin and front user to login through same area? No need to worry as in this article, I am…","fields":{"slug":"/engineering/separate-login-page-for-admin-and-user/"},"html":"

Are you afraid of hackers and feel unsafe for admin and front user to login through same area?
\nNo need to worry as in this article, I am going to guide you with how to create separate login area for admin. Along with that, I will also provide the required steps to disable administrator login through user/login page.

\n

Please follow the following implementation steps.

\n

Step by step Guide:

\n
    \n
  1. In the first step, you need to implement hook_menu in your module file.
    2. \n
\n
 t('Admin Login Page'),\n    'page callback' => 'yourmodule_admin_login_page',\n    'page arguments' => array(),\n    'access arguments' => array('access content'),\n    'type' => MENU_CALLBACK,\n  );\n  return $menu_items;\n}-->
\n
    \n
  1. After adding menu in module file, the next step is to define the page callback function yourmoduleadminlogin_page. In this function, we’ll define the layout of admin login page using theme.
    2. \n
\n
function yourmodule_admin_login_page() {\n  return theme('yourmodule_admin_login_template');\n}
\n
    \n
  1. Now that you have defined page callback function, the next step is to implement hook_theme in your module file.
    2. \n
\n
array(\n      'template' => 'yourmodule-admin_login',\n      'render element' => 'form',\n      'path' => $path,\n    ),\n  );\n  return $theme;\n}-->
\n
    \n
  1. After implementation of hook theme in module file, the next step is to implement preprocess function for template file.
    2. \n
\n
 'hidden',\n    '#value' => 'admin_login',\n    '#name' => 'hidden_admin_login_form',\n  );\n  $variables['rendered'] = drupal_render($form);\n}-->
\n

Note : In the above code, we have used the hidden element to identify the admin login page.

\n
    \n
  1. After adding menu in module file, the next step is to define the page callback function yourmodule_admin_login_page. In this function, we’ll define the layout of admin login page using theme.
    2. \n
\n

'yourmodule-admin_login.tpl.php'

\n
    \n
  1. Now paste the following code in yourmodule-admin_login.tpl.php file.
    2. \n
\n
<!--\n  \n-->
\n
    \n
  1. After that, clear your website’s cache and check the following url for your admin login page
    2. \n
\n

URL : your-site-domain/admin/login

\n

All above steps are used to show admin login page. But if you want that only administrator can login through page admin/login then follow the following the next steps.

\n
    \n
  1. In this step, you need to implement hook_form_alter function. In this function we will add custom validation.
    2. \n
\n
function yourmodule_form_alter(&$form, &$form_state, $form_id) {\n  if ($form_id == 'user_login') {\n    $form['#validate'][] = 'yourmodule_external_validate';\n  }\n}
\n
    \n
  1. After that, add the following code to define the custom validation in which only administrator can login.
    2. \n
\n
roles);\n    if ($access_granted) {\n      return TRUE;\n    }\n    else {\n      form_set_error('', t('Only site administrator can login.'));\n      return FALSE;\n    }\n  }\n}-->
\n

Note: If you want that administrator can’t login through user login page then add following code to do this.

\n

Add the mentioned code in function yourmodule_external_validate

\n
roles);\n    if ($user_access_granted) {\n      form_set_error('', t('Only front user can login.'));\n      return FALSE;\n    }\n    else {\n      return TRUE;\n    }\n}-->
\n

Complete code of function yourmodule_external_validate looks like:

\n
roles);\n    if ($access_granted) {\n      return TRUE;\n    }\n    else {\n      form_set_error('', t('Only site administrator can login.'));\n      return FALSE;\n    }\n  }\n  else {\n    $user = user_load($form_state['uid']);\n    $user_access_granted = in_array('administrator', $user->roles);\n    if ($user_access_granted) {\n      form_set_error('', t('Only front user can login.'));\n      return FALSE;\n    }\n    else {\n      return TRUE;\n    }\n  }\n}-->
\n

If you are searching over the web and can’t find anything to create separate admin login page in drupal, Please follow the mentioned above steps and you are done. Also create different layout for this  admin login page.

\n","frontmatter":{"date":"October 29, 2015","updated_date":null,"description":null,"title":"Separate Drupal Login Page for Admin and User","tags":["Drupal","Admin Panel"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.9047619047619047,"src":"/static/1946d03fb98b01c53c55a9c4b72a0ab8/ee604/drupal.png","srcSet":"/static/1946d03fb98b01c53c55a9c4b72a0ab8/69585/drupal.png 200w,\n/static/1946d03fb98b01c53c55a9c4b72a0ab8/497c6/drupal.png 400w,\n/static/1946d03fb98b01c53c55a9c4b72a0ab8/ee604/drupal.png 800w,\n/static/1946d03fb98b01c53c55a9c4b72a0ab8/f3583/drupal.png 1200w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Versha Gupta","github":"vershagupta","avatar":null}}}},{"node":{"excerpt":"This tutorial provides a solution to get email alerts, when a unhandled error occurs. For this tutorial, we are using WordPress. Imagine you…","fields":{"slug":"/engineering/how-to-get-email-alerts-for-unhandled-php-exceptions/"},"html":"

This tutorial provides a solution to get email alerts, when a unhandled error occurs. For this tutorial, we are using WordPress.

\n

Imagine you created a php application and it’s running fine.  A couple of days later, a user complains about an error which you’re totally unaware of. Such unhandled errors are very common in php applications. So, to find these issues, we are going to send email notifications whenever an error occurs.

\n

Step 1. First of all we need to identify a common application file that include at top of application. in this case the file is “wp-config.php” at the root of your wordpress hosting directory.

\n

Step 2. Let’s add the following line of code in this file under php tag.

\n
set_error_handler('errorHandler'); // this line of code sets an error handler custom function to handle any php error. And here we pass our custom function that name “errorHandler”\n\nfunction createTable($array){\n    if(is_array($array) && count($array)>0){\n        $errorContent = "<table border = 1><tr><td>";\n        foreach ($array as $key => $val) {\n            $errorContent .= $key . "</td><td>";\n            if(is_array($val) && count($val)>0){\n                $errorContent .= createTable(json_decode(json_encode($val),true)) ;\n            }else{\n                $errorContent .= print_r($val, true) ;\n            }\n        }\n        $errorContent .= "</td></tr></table>";\n        return $errorContent;\n    }\n    return '';\n}\n \n/**\n * \n * @param type $errorNumber        // This parameter returns error number.\n * @param type $errorString           // This parameter returns error string.\n * @param type $errorFile               // This parameter returns path of file in which error found.\n * @param type $errorLine              // This parameter returns line number of file in which you get an error.\n * @param type $errorContext         // This parameter return error context.\n */\nfunction errorHandler($errorNumber, $errorString, $errorFile, $errorLine, $errorContext) {\n    $emailAddress = 'example@example.com';\n    $emailSubject = 'Error on my Application';\n    $emailMessage = '<h2>Error Reporting on :- </h2>[' . date("Y-m-d h:i:s", time()) . ']';\n    $emailMessage .= "<h2>Error Number :- </h2>".print_r($errorNumber, true).'';\n    $emailMessage .= "<h2>Error String :- </h2>".print_r($errorString, true).'';\n    $emailMessage .= "<h2>Error File :- </h2>".print_r($errorFile, true).'';\n    $emailMessage .= "<h2>Error Line :- </h2>".print_r($errorLine, true).'';\n    $emailMessage .= "<h2>Error Context :- </h2>".createTable($errorContext);\n    $headers = "MIME-Version: 1.0" . "rn";\n    $headers .= "Content-type:text/html;charset=UTF-8" . "rn";\n    mail($emailAddress, $emailSubject, $emailMessage, $headers); // you may use SMTP, default php mail service OR other email sending process\n}
\n

Step 3. Now save the file and upload on server.

\n

Whenever we got any error in wordpress then above code will send an email to given email-address (example@example.com). You can use the above code on production websites to improve application performance and track all errors that’s are missed.

\n

Similarly we can use above code in drupal, joomla, and many other content management systems.
\nCommon config files on other platforms are listed below:

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
CMS/application nameLocation of common file
4Images Gallery/config.php
B2 Evolution/conf/_basic_config.php
Boonex Dolphin/inc/header.inc.php
Concrete5/config/site.php
Coppermine Photo Gallery/include/config.inc.php
Crafty Syntax Live Help/config.php
Cube Cart/includes/global.inc.php
dotProject/includes/config.php
Drupal/sites/default/settings.php
e107/e107_config.php
FAQMasterFlex/faq_config.php
Gallery/config.php
Geeklog/db-config.php or /siteconfig.php or /lib-common.php
glfusion/private/db-config.php
Hotaru/hotaru_settings.php
Joomla/configuration.php
LiveSite/livesite/config.php
LifeType/config/config.properties.php
Mambo/configuration.php
Marketecture/include/config.php
MODx/manager/includes/config.inc.php
Moodle/config.php
MyBB/inc/config.php
Noahs Classifieds/app/config.php
Nucleus/config.php
ocPortal/info.php
OpenCart/config.php or /admin/config.php
osCommerce/includes/configure.php or /admin/includes/configure.php
Oxwall/ow_includes/config.php
PHP-Nuke/config.php
phpBB/config.php
phpFormGenerator/index.php or /mysql.class.php
phpFreeChat/forms/admin/config.inc.php (only if you have saved form input to a database)
PHPlist/config/config.php
phpMyDirectory/defaults.php
phpWCMS/include/inc_conf/conf.inc.php
phpWebSite/conf/config.php
PhpWiki/admin.php or /lib/config.php
Pligg/libs/dbconnect.php
Post-Nuke/config.php
PrestaShop/config/settings.inc.php
Saurus CMS/config.php
ShopSite/includes/configure.php or /admin/includes/configure.php
Siteframe/config.php
Simple Machines Forum/Settings.php
Soholaunch/sohoadmin/config/isp.conf.php
SugarCRM/config.php
Textpattern/textpattern/config.php
TikiWiki/db/local.php
Tomato Cart/includes/configure.php
TYPO3/typo3conf/localconf.php
WebCalendar/includes/settings.php
WHMCS/configuration.php
WordPress/wp-config.php
X7 Chat/config.php
Xoops/mainfile.php
Zen Cart/includes/configure.php or /admin/includes/configure.php
Zikula/config.php
\n","frontmatter":{"date":"October 26, 2015","updated_date":null,"description":null,"title":"How to Get Email Alerts for Unhandled PHP Exceptions","tags":["PHP","Email"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1,"src":"/static/4a396ee0a823348eb1c43701756c8981/7d145/email-alerts-unhandled-php.png","srcSet":"/static/4a396ee0a823348eb1c43701756c8981/69585/email-alerts-unhandled-php.png 200w,\n/static/4a396ee0a823348eb1c43701756c8981/497c6/email-alerts-unhandled-php.png 400w,\n/static/4a396ee0a823348eb1c43701756c8981/7d145/email-alerts-unhandled-php.png 610w","sizes":"(max-width: 610px) 100vw, 610px"}}},"author":{"id":"Team LoginRadius","github":"LoginRadius","avatar":null}}}},{"node":{"excerpt":"So last week while I was setting the analyzers on ElasticSearch settings for Email field, it took me some good time to find the perfect…","fields":{"slug":"/engineering/elastic-search-analyzers-for-emails/"},"html":"

So last week while I was setting the analyzers on ElasticSearch settings for Email field, it took me some good time to find the perfect custom analyzer for my purpose, so I feel it might be useful to share this with someone who needs it.

\n
\n

When a document is indexed, its individual fields are subject to the analyzing and tokenizing filters that can transform and normalize the data in the fields. For example — removing blank spaces, removing html code, stemming, removing a particular character and replacing it with another. At indexing time as well as at query time you may need to do some of the above or similiar operations. For example, you might perform a Soundex transformation (a type of phonic hashing) on a string to enable a search based upon the word and upon its 'sound-alikes'.

\n
\n

Let me briefly explain what I am trying to do with my Email field. The email addresses will be stored as a comma separated string with potentially multiple email addresses, and what I am expecting is after the to search to retrieve the matching results. Besides the exact match like search for \"john.doe@gmail.com\", I also want to be able to search for \"john.doe\" or \"gmail.com\" to retrieve the relative information.

\n

Here is the full schema for it:

\n
    \n
  1. {\"email\": \"john.doe@gmail.com\"}
    2. \n
  2. {\"email\": \"john.doe@gmail.com, john.doe@outlook.com\"}
    3. \n
  3. {\"email\": \"hello-john.doe@outlook.com\"}
    4. \n
  4. {\"email\": \"john.doe@outlook.com\"}
    5. \n
  5. {\"email\": \"john@yahoo.com\"}
    6. \n
\n

And the search schema is:
\n[Search > Response]
\n\"john.doe@gmail.com\" > 1,2
\n\"john.doe@outlook.com\" > 2,4
\n\"john@yahoo.com\" > 5
\n\"john.doe\" > 1,2,3,4
\n\"john\" > 1,2,3,4,5
\n\"gmail.com\" > 1,2
\n\"outlook.com\" > 2,3,4

\n

If you decide to keep reading, then it means you have the same needs as I did so I hope the following solution can actually help.
\nSo... In the official documentation they did have a good solution but it was not easy to find, at least for me, by using regular expression:

\n
{\n   "settings" : {\n      "analysis" : {\n         "filter" : {\n            "email" : {\n               "type" : "pattern_capture",\n               "preserve_original" : 1,\n               "patterns" : [\n                  "([^@]+)",\n                  "(\\p{L}+)",\n                  "(\\d+)",\n                  "@(.+)"\n               ]\n            }\n         },\n         "analyzer" : {\n            "email" : {\n               "tokenizer" : "uax_url_email",\n               "filter" : [ "email", "lowercase",  "unique" ]\n            }\n         }\n      }\n   }\n}
\n

This setting will perfectly address the issues from above, and do not generate way to much tokens in your ES cluster.
\nAt the end I want to share two good gadgets that I found very helpful with ES analyzers and regular expression.

\n
    \n
  1. Inquisitor:
    \nThis Elastic Search tool allows you to quickly apply different analyzers, tokenizers and filters to your input, fork it here:
    \nElasticsearch Inquisitor
    2. \n
  2. regex 101:\nTo quickly test out your regular expression, try this link: regex101
    3. \n
\n","frontmatter":{"date":"October 15, 2015","updated_date":null,"description":null,"title":"ElasticSearch Analyzers for Emails","tags":["Elastic Search","Analyzers"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.9230769230769231,"src":"/static/db4c939fb2ba73abdc984760c0082348/ee604/elastic-search.png","srcSet":"/static/db4c939fb2ba73abdc984760c0082348/69585/elastic-search.png 200w,\n/static/db4c939fb2ba73abdc984760c0082348/497c6/elastic-search.png 400w,\n/static/db4c939fb2ba73abdc984760c0082348/ee604/elastic-search.png 800w,\n/static/db4c939fb2ba73abdc984760c0082348/f3583/elastic-search.png 1200w,\n/static/db4c939fb2ba73abdc984760c0082348/5707d/elastic-search.png 1600w,\n/static/db4c939fb2ba73abdc984760c0082348/a16c9/elastic-search.png 3422w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Lucius Yu","github":null,"avatar":null}}}},{"node":{"excerpt":"Integrating social into your site can drastically improve user engagement with your platform. Below are a few useful solutions and…","fields":{"slug":"/engineering/simple-social-media-solutions/"},"html":"

Integrating social into your site can drastically improve user engagement with your platform. Below are a few useful solutions and implementation instructions.

\n

Social Login

\n

Social Login, also known as Social Sign On, Allows you to bypass traditional registration forms and utilize the systems in place by social providers in order to retrieve a copy of the users data and a unique identifier for the user that can be used to identify that user in your system.

\n

The following guides go over setting up Social Login with a few common Social Providers:
\nFacebook: How to Implement Facebook Social Login
\nTwitter: Integrating Twitter Social Login
\nLinkedIn: Integrating LinkedIn Social Login on a Website

\n

Social Sharing

\n

Most major social providers offer an easy tool to formulate and include sharing buttons on your pages. Below is an example of setting up an easy to use social sharing button with Facebook:

\n
    \n
  1. Include the Facebook JavaScript SDK on your page:
    2. \n
\n
<!---->
\n
    \n
  1. \n

    Next include the div that will contain the sharing button on your page with the following data attributes:

    \n
      \n
    1. data-href - Set this to the URL that you want to share.
      2. \n
    2. data-layout - Set this to one of the following to control the style of button that is displayed:
      \na. box_count
      \nb. button_count
      \nc. button
      \nd. icon_link
      \ne. icon
      \nf. link
      3. \n
    \n
    2. \n
\n

Sample Div:

\n
<!-- -->
\n

You can find information on generating sharing links with other providers in the following locations:
\nTwitter

\n

Or you can contribute to our open source project on github- Github-Social9

\n

Follow Company

\n

Follow buttons work very much the same as the social sharing buttons above. Simply include the relevant SDK and div with some customizations and users will be able to follow(and un-follow) your brand directly from your page.

\n

Below is an example of setting up a Twitter follow button:

\n
    \n
  1. Include Twitters JavaScript SDK using their provided script:
    2. \n
\n
<!---->
\n
    \n
  1. Include a link tag in the location that you would like to display your follow button:
    2. \n
\n
<!-- Follow @TwitterDev -->
\n

You can set the data attributes in the above link to control various aspects of the follow button.

\n

Find information on generating follow buttons for other social providers in the following locations:
\nFacebook

\n

Social Linking

\n

One of the most common and easy to configure social integrations is setting up links to your companies Social profiles.
\nAll you need to do is create a link tag on your page:

\n
<!--Facebook-->
\n

You can improve upon this by utilizing one of the Social providers branded icons to better display the linking UX. Get a copy of Facebooks Branded Icon.
\nYou can store the image locally and include it in the a tag:

\n
<!--<img src="" alt="Facebook"> -->
\n

Conclusion

\n

Now that you have setup the above social features your users will have a variety of touch-points to keep them active and interacting with your site, seamlessly driving user conversions and making brand ambassadors of your users.

\n","frontmatter":{"date":"October 08, 2015","updated_date":null,"description":null,"title":"Social Media Solutions","tags":["Social Media","Social Login"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.408450704225352,"src":"/static/b3a4226418ae955228bf1bc38289c30a/ee604/social-media.png","srcSet":"/static/b3a4226418ae955228bf1bc38289c30a/69585/social-media.png 200w,\n/static/b3a4226418ae955228bf1bc38289c30a/497c6/social-media.png 400w,\n/static/b3a4226418ae955228bf1bc38289c30a/ee604/social-media.png 800w,\n/static/b3a4226418ae955228bf1bc38289c30a/40ffe/social-media.png 960w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Karl Wittig","github":null,"avatar":null}}}},{"node":{"excerpt":"Introduction Authentication and authorization both are most important things for any system and application. This blog starts with…","fields":{"slug":"/engineering/alternate-authentication-asp/"},"html":"

Introduction

\n

Authentication and authorization both are most important things for any system and application. This blog starts with authentication and authorization concepts and after that explains the three default important ways and three custom authentication ways for doing authentication and authorization i.e. windows, forms ,passport, multipass, JWT  and SAML authentication. Plus, in this blog I will explain some fundamental concepts about the different authentication system.

\n

Authentication and Authorization

\n

Authentication is the process for checking the identity of a user based on the user’s credentials. Generally, user’s credentials are  in the form of user ID and password, and we check their credentials from database or equivalent alternative, if it exists then user is a valid candidate for next process - authorization.

\n

Authorization also known as “Permission Control” will come after authentication. Authorization is the process of deciding what kind of resource a user can access based on their identity and checking whether the authenticated user has sufficient rights to access the requested resources. Typically a resource can be an ASP.NET web page, media files (MP4, GIF, JPEG etc), compressed file (ZIP, RAR) etc.

\n

ASP.NET default authentication Providers

\n

1. Form Authentication

\n

Normally, form authentication is based on cookies, the authentication and permission settings are stored in cookies. However, we can also use form authentication without cookies, and in cookie-less form authentication we can use query string for passing user details. Remember, the key concept is always ONLY allow the user with correct credential also enough permission to view certain resources, so we need to capture their information and compare with what we have stored in the database. And no matter what kind of form authentication we use, after we receive the data on server end, we will compare them with the data stored in any storage method/provider. For example, we can store username and password in the web.config file, a JSON file, or a database table.

\n

Forms authentication flow:

\n
    \n
  1. When a user requests a page for the application, ASP.NET checks session cookie. If the cookie exists and valid, ASP.NET assumes the user is authenticated and processes the request.
    2. \n
  2. If session cookies does not exists or not valid then it redirect to login form.
    3. \n
  3. User will enter username and password and if they are valid then he will get authenticated and authorized.
    4. \n
\n

2. Passport Authentication

\n

Passport authentication is a centralized authentication service provided by Microsoft. The .NET Passport single sign-in service. When we use passport authentication then user authentication in your application is managed by Microsoft's passport service. Passport authentication uses encrypted cookies to manage the authentication.

\n

How Password authentication works Users do not need to retype their sign-in name and password when moving from site to site. Those .NET Passport–enabled sites will issue a set of encrypted cookies in the .NET Passport central servers' domain to facilitate silent and seamless sign-in across sites. In some cases, sites owners will first redirect their end-users to .NET Passport sign-in and to authenticate upon first viewing of their site. If the users are logged in already, they'll get authenticated by ASP.NET, and if they are not logged in they will get redirected to passport servers (i.e hotmail, Live etc.)  to login first. If user successfully authenticates himself, it will return a token to your website.

\n

3. Windows Authentication

\n

We use windows authentication when we are creating a web application for a limited number of users who already have Windows account and this type of authentication is quite useful in an intranet environment. This authentication method uses local users windows account 'credentials' for to validate the user. Dot Net web application generally hosted on IIS(Internet Information Server) so the requests go directly to IIS to provide the authentication process in a Windows-based authentication model.

\n

The entire responsibility of authentication is done by IIS. It first takes the user’s credentials from the domain login. If this process fails, IIS displays an alert dialog box so the user can enter or re-enter his login information.

\n

Windows authentication have some advantages and disadvantages:

\n

Windows authentication Advantage

\n
    \n
  1. Developers need to write less line of code for managing user's authentication.
    2. \n
  2. Users can use their existing windows accounts for login.
    3. \n
\n

Windows authentication dis-Advantage

\n
    \n
  1. You can't control windows authentication process.
    2. \n
  2. Windows authentication only works on Microsoft OS you can't use it on others OS.
    3. \n
\n

4. Custom authentication Provider

\n
    \n
  1. Multipass
    2. \n
\n

Multipass authentication is a single sign on authentication. Suppose you have multiple sites and you want to create a single account for a user on both sites then you can use Single Sign-On. Single Sign-On is authentication system it allow user to share his authentication details with your there site. This allows a seamless experience for your users without forcing them to create a separate account on your second site. A multipass is simply a hash of keys and values, provided as an AES encrypted JSON hash.

\n
    \n
  1. JWT (JSON Web token)
    2. \n
\n

JWTs represent a set of claims as a JSON object that is encoded in a JWS and/or JWE structure. This JSON object is called “JWT Claims Set”. The JSON object consists of zero or more name/value pairs (or members), where the names are strings and the values are arbitrary JSON values. These members are the claims represented by the JWT.

\n

Your JWTs can contain any information you want; the user's name, birthdate, email, etc. You do this with claims based authorization. You then just tell your provider to make a JWT with these claims from the claims principle.

\n
    \n
  1. SAML (Security Assertion Markup Language)
    2. \n
\n

SAML - Security Assertion Markup Language SAML. SAML is developed by the Security Services Technical Committee of \"Organization for the Advancement of Structured Information Standards\" (OASIS). SAML is an XML-based framework for exchanging user authentication. The purpose of SAML is to enable Single Sign-On for web applications across various domains.

\n

SAML have three components: assertions, protocol, and binding. Assertions are authentication, attribute, and authorization. Authentication assertion validates the user's identity. Attribute assertion contains specific information about the user. And authorization assertion identifies user role and permissions.

\n

SAML works with multiple protocols including Hypertext Transfer Protocol (HTTP), Simple Mail Transfer Protocol (SMTP), File Transfer Protocol (FTP) and also supports SOAP

\n

Summary

\n

Different authentication methods are available, and website’s owner always gets confused about which authentication method they should use, here I have explained some of the popular authentication and authorization methods, hope it made it a little bit clear for you. And I will provide some in-depth details about each type of authentication in my next blog, happy coding.

\n","frontmatter":{"date":"October 01, 2015","updated_date":null,"description":"Learn types of Authentication in Asp.Net and how it plays an important role in any system.","title":"Types of Authentication in Asp.Net","tags":["Engineering","Authentication","Asp.Net","Multipass","JWT","JSON Web Token"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1,"src":"/static/09593e63090dd5b6ec6f5258209a953b/6d161/alternate-authentication-asp-dot-net1-150x150.png","srcSet":"/static/09593e63090dd5b6ec6f5258209a953b/6d161/alternate-authentication-asp-dot-net1-150x150.png 150w","sizes":"(max-width: 150px) 100vw, 150px"}}},"author":{"id":"Team LoginRadius","github":"LoginRadius","avatar":null}}}},{"node":{"excerpt":"Facebooks Graph API gives you the ability to better understand and target content to your user. In this blog we go over some useful…","fields":{"slug":"/engineering/using-facebook-graph-api-after-login/"},"html":"

Facebooks Graph API gives you the ability to better understand and target content to your user. In this blog we go over some useful implementations of the Graph API that you can use to pull in user data as well as publish on your users behalf.

\n

Getting Your Site Ready

\n

The first thing you will need to do is implement an authorization interface that will allow your users to Login with there Facebook credentials and grant access to your application to handle the features that we will go over in this blog.

\n

You can refer to this article on setting up a Facebook Login integration: Implement Facebook Social Login

\n

While implementing the Login detailed in the above blog you can modify the scope included in the Facebook button to request the scopes that we will be using.

\n

Define your Facebook button as follows:

\n
<!-- -->
\n

This will cause your interface to request additional permissions that may require you to submit your app for review in order for your users to get access to these permissions.

\n

Managing your users login credentials.

\n

After your user has authenticated you can capture the users access token for use in your application or backend systems. During the Facebook login in the function function statusChangeCallback you can check the response for an active Facebook session and store the access token from this object as follows:

\n
if (response.authResponse) { var access_token = FB.getAuthResponse()['accessToken']; }
\n

This token is valid for 2 hours by default and can be upgraded to a long lived with a server-side call as detailed here: Access Tokens for Meta Technologies

\n

The long lived token will be valid for 60 days over which you will be able to access the users data or handle actions that they have granted your app permissions.

\n

If you have stored an access token or long lived token and wish to reinitialize the Facebook JavaScript graph API you can handle this by including the following parameter when making FB.api calls:

\n
FB.api( '/me', 'get', { access_token : 'access_token_for_some_user_fetched_from_your_database' } );
\n

\n

Getting User Data and Specific Fields

\n

The simplest way to get a copy of the User Profile object is to access the /me endpoint:

\n
FB.api('/me', function(response) { });
\n

This will this will return the users name and an ID by default. You can add additional field requests to the me endpoint in order to retrieve further data-points for the user. Below we request the users id, name, age_range, bio, birthday, and email using a stored access-token.

\n
<!--FB.api( '/me?fields=id,name,about,age_range,bio,birthday,email', 'get', { access_token :  },function(response) { //Handle Data Here it will arrive in a Json object in the response } );-->
\n

There are additional edge cases which can be accessed through the /me endpoint. A full list can be found here. A below sample details how you can retrieve the videos that the user is tagged in or has uploaded.

\n
<!--FB.api( '/me/videos', 'get', { access_token :  },function(response) { //Handle Data Here it will arrive in a Json object in the response } );-->
\n

\n

Publishing Content to a Users Wall

\n

In order to publish content to a users wall you will have to have requested the publish_actions permission during login which we have done in the first part of this article. You can then access the following endpoint to publish a status post to a users wall:

\n
<!--FB.api( '/me/feed?message=', 'Post', { access_token :  },function(response) { //Handle Response which will contain a Post ID if successful } );-->
\n

\n

Conclusion

\n

Facebook offers many options to integrate their API into your site and offers a variety of easy to use SDKs for multiple languages. Check out their documentation for details on the various SDKs and additional graph endpoints.

\n","frontmatter":{"date":"September 29, 2015","updated_date":null,"description":null,"title":"Using Facebook Graph API After Login","tags":["Facebook","Graph API"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1,"src":"/static/eb14899edcba74a8eeaae71d14ebf399/6d161/fb-feat-img-150x150.png","srcSet":"/static/eb14899edcba74a8eeaae71d14ebf399/6d161/fb-feat-img-150x150.png 150w","sizes":"(max-width: 150px) 100vw, 150px"}}},"author":{"id":"Karl Wittig","github":null,"avatar":null}}}}]},"markdownRemark":{"excerpt":"Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards…","fields":{"slug":"/identity/developer-first-identity-provider-loginradius/"},"html":"

Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards and refining approaches to building secure, seamless experiences.

\n

We’re here to support developers on that journey. We know how important simplicity, efficiency, and well-structured documentation are when working with identity and access management solutions. That’s why we’ve redesigned the LoginRadius website—to be faster, more intuitive, and developer-first in every way.

\n

The goal? Having them spend less time searching and more time building.

\n

What’s New and Improved on the LoginRadius Website?

\n

LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve spent the last few months redesigning our interface— making navigation more intuitive and reassuring that essential resources are easily accessible.

\n

Here’s a closer look at what’s new and why it’s important:

\n

A Developer-Friendly Dark Theme

\n

\"This

\n

Developers spend long hours working in dark-themed IDEs and terminals, so we’ve designed the LoginRadius experience to be developer-friendly and align with that preference.

\n

The new dark mode reduces eye strain, enhances readability, and provides a seamless transition between a coding environment and our platform. Our new design features a clean, modern aesthetic with a consistent color scheme and Barlow typography, ensuring better readability. High-quality graphics and icons are thoughtfully placed to enhance the content without adding visual clutter.

\n

So, whether you’re navigating our API docs or configuring authentication into your system, our improved interface will make those extended development hours more comfortable and efficient.

\n

Clear Categorization for LoginRadius Capabilities

\n

\"This

\n

We’ve restructured our website to provide a straightforward breakdown of our customer identity and access management platform capabilities, helping you quickly find what you need:

\n\n

This structured layout ensures you can quickly understand each capability and how it integrates into your identity ecosystem.

\n

Developer-First Navigation

\n

\"This

\n

We’ve been analyzing developer workflows to identify how you access key resources. That’s why we redesigned our navigation with one goal in mind: to reduce clicks and make essential resources readily available.

\n

The new LoginRadius structure puts APIs, SDKs, and integration guides right at the menu bar under the Developers dropdown so you can get started faster. Our Products, Solutions, and Customer Services are also clearly categorized, helping development teams quickly find the right tools and make informed decisions.

\n

Quick Understanding of Integration Benefits

\n

\"This

\n

Developers now have a clear view of the tech stack available with LoginRadius, designed to support diverse business needs.

\n

Our platform offers pre-built SDKs for Node.js, Python, Java, and more, making CIAM integration seamless across popular programming languages and frameworks.

\n

Over to You Now!

\n

Check out our revamped LoginRadius website and see how the improved experience makes it easier to build, scale, and secure your applications.

\n

Do not forget to explore the improved navigation and API documentation, and get started with our free trial today. We’re excited to see what you’ll build with LoginRadius!

\n","frontmatter":{"date":"February 21, 2025","updated_date":null,"description":"LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve redesigned our website interface, making navigation more intuitive and reassuring that essential resources are easily accessible.","title":"Revamped & Ready: Introducing the New Developer-First LoginRadius Website","tags":["Developer tools","API","Identity Management","User Authentication"],"pinned":true,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7857142857142858,"src":"/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp","srcSet":"/static/80b4e4fbe176a10a327d273504607f32/61e93/hero-section.webp 200w,\n/static/80b4e4fbe176a10a327d273504607f32/1f5c5/hero-section.webp 400w,\n/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp 800w,\n/static/80b4e4fbe176a10a327d273504607f32/99238/hero-section.webp 1200w,\n/static/80b4e4fbe176a10a327d273504607f32/7c22d/hero-section.webp 1600w,\n/static/80b4e4fbe176a10a327d273504607f32/1258b/hero-section.webp 2732w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}},"pageContext":{"limit":6,"skip":924,"currentPage":155,"type":"///","numPages":161,"pinned":"ee8a4479-3471-53b1-bf62-d0d8dc3faaeb"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}