Using devise/cancan in several rails application with central authentication [closed] - ruby-on-rails-3

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
I need to have single-sign-on and central authentication for 3 of my customer projects(separated rails application under different subdomains). And also I need to manage authorizations with several roles.
This is the first time I am going to manage a SSO, I see that it looks possible to use ruby-cas-server/ruby-cas-client with devise to achieve central authentication & SSO. And I am thinking to manage authorizations with roles using CanCan.
The landscope I am thinking will be: there will be a central rails app as the User management, administrator will CRUD users and manage authorizations there. CAS server will do the authentication against the DB of the central user management system. Satellite rails applications will use CAS server for authentication.
I want to ask, is this possible to get the authorization info in the satellite system using CanCan? Is there anyone who've done that? and Is there any better/easier solution to achieved all this?
Thanks a lot.

Related

MVC4 Application Design/Solution Layout [closed]

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
I am going to build a new MVC4 web based application, so i would need to create new solution and different kind of projects. So my question what type of projects i would need in my solutions.
My requirement is as following-
We have different travel agents working with us each having its unique name. May be 4-5 for now. The plan is to create 4-5 different URLs and handle it over to those travel agents.
Here is a sample User Story
User (for e.g travel agent id 1) should be able to come to URL mywebsite/agent/1 and he sees all the available tickets related to that agent which will coming from external web service and is not under my control.
He selects the products and click buy which again calls up some web service goes to their service and comes back with confirmation number.
This is pretty much it for the application.
So my question is in terms of what all projects should i create for such application.
Thanks
I would suggest you get a copy of either Pro ASP.NET MVC 3 Framework, Third Edition or Pro Asp.Net Mvc 4. Either way, i usually do a blank solution and then add 3 projects like Something.WebUI, Something.Domain, Something.UnitTests (Only if you want to write tests, highly recommended).
Another option is you can head to Pluralsight and watch a video by Scott Allen

How to recognize user when logged in using different ways [closed]

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
SO is using multiple ways for user to get logged in, like using emails addresses from gmail, yahoo, facebook, stackexchange and open ID.
User might can use e.g; gmail and enjoy SO for few days and then due to any or some reason (I assume, he forgot actual way), he starts using facebook. Now SO will have multiple records for same user. Is there any way, sites can recognize there old members ?
Its just a confusion, I am curious about the concept. Like one way to register and login would be enough and would help to keep member's SINGLE record for the life. I would prefer site's own registration and login forms.
You cannot recognize a user when "logged in" using different ways. Unless you ask the user to link the different ways to ONE user profile. StackExchange makes this possible, you can simply add another OpenID identity to your user.
As soon as you enable user authentication through OpenID or OAuth for your service you WILL have this challenge and can either choose to solve it by enabling "linking" of identities to a user artifact, or you can choose to ignore it.
Are you confused about the benefits of OpenID?

Game authentication like minecraft? [closed]

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 10 years ago.
I'm making a game in C# and was wondering how to authenticate a user. I want it to be similar to minecraft where user makes an account and can pay to make their account premium. People on the team know most languages, so that isn't a limitation. We have a fairly large budget so that isn't a limitation either.
How would I go about doing this?
If you know how to do this and you want to be part of the team just post a comment.
Thanks
Just within the .NET framework you have multiple options. You could allow impersonation for anonymous access to certain parts of the site and maintain different users for paid accounts (doesn't need to be an AD/whatever user per paid account).
If you don't want to use AD user per account etc. you could write an identity service which passes back a token, allowing your game/site to log the person on as a certain user. If you want claims based identity, you could use the WIF SDK.
If you're happy with AD based basic authentication per user, that's pretty simple. You could pull the user's principles from AD to see if they are in the paid for group etc.

Web service: Ruby on Rails versus WCF [closed]

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 11 years ago.
I would like to setup a web service, to be accessed via a mobile device. The main purpose of the server is data storage. I would like to know some of your opinions on the advantages\disadvantages between RoR and WCF for building the server-side of the web service.
I think you're looking at this the wrong way. What does the web service do?
The fact that it's a web service a mobile device talks to is itself not a big deal. Lots of stuff exists to do that. WCF is pretty good at it. I don't know anything about RoR but it probably is too.
So once the mobile device makes a request, what's going to happen on the server? Who is building it, and what languages/frameworks do they already know? What if any infrastructure is already in place?
If you can answer those questions, I think the answer to your question will become more apparent. :)

functional requirement specification for the following abstract [closed]

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.
Closed 11 years ago.
can any one give me the functional requirements documentation for the reservation tracking system ,it is going to be implemented in asp.net and the details are as follows,
1)The main theme of this application is gathering reservations from different clients and updated in particular intervals of time to the Fitzserver then these reservations will be send to the particular driver.
2) Then driver information is retrieved through mobile application using webservice and updated in the Fitzserver.
3) The information of driver from Fitzserver is send to the client as link to email.
No, nobody can unless they are either the user/stakeholder of a similar system or the developer/architect of a similar system.
You should execute the requirements process. Talk to the endusers, write down what they expect.
Examples/guidelines on how to go forward:
http://epf.eclipse.org/wikis/openup/index.htm
See Practices > Technical Practices > Use Case Driven Development
http://en.wikiversity.org/wiki/Technical_writing_specification