ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
I am planning a new Aerospike Community Edition deployment and need to know whether the default configuration exposes the service port to unauthenticated clients on every network interface. The documentation notes that default bind addresses and authentication requirements can differ between Community and Enterprise editions and across server versions, but i
Unresolved Decision on Scope Enforcement The Android AccountManager API allows apps to request authentication tokens with specific scopes via getAuthToken() . The underlying authenticator is responsible for filtering scopes, but the framework does not impose any additional limits when multiple applications share the same authenticator. When a token expires,
Signature Algorithm Deprecation OpenSSH 8.8 and later versions have disabled the ssh-rsa signature algorithm by default. This change targets the use of SHA-1 for signatures during the authentication handshake, though the underlying RSA key pair remains valid if a more secure signature scheme is employed. Compatibility Constraints Systems maintaining legacy c
Goal We want to publish Python packages to PyPI using project‑scoped API tokens that enforce the principle of least privilege while automatically expiring after a defined period. Current Constraint PyPI API tokens are currently permanent until the owner manually revokes them; there is no built‑in expiration field or time‑to‑live setting for project‑scoped to
The Appcelerator Titanium SDK utilizes session tokens via Ti.Cloud.Users.login to authenticate API requests. These tokens have a defined Time-to-Live (TTL), typically 24 hours, after which the server returns a 401 Unauthorized response for subsequent calls. While the SDK provides the mechanism to obtain these tokens, there is no built-in transparent renewal
Goal: Least‑Privilege Authentication with Robust Token Refresh In a Xamarin.Forms app, the objective is to request only the scopes required for a feature, store the resulting access and refresh tokens securely, and refresh the access token silently when it expires. The design must also handle the case where the refresh token itself becomes invalid (revoked o
When a Perl script authenticates a user against the system password database, the developer must manually adjust the real and effective UID/GID using $<, $>, $(, $) or POSIX::setuid/setgid and also verify the shadow expiration field (sp_expire) to reject expired credentials. Because this privilege‑reduction and expiration handling is left to each imple
Goal: maintain uninterrupted repository interactions after a personal access token (PAT) reaches its expiration date without requiring manual re‑entry. Constraint: GitKraken currently does not monitor PAT validity; it only reacts when a push, pull or fetch fails with an authentication error, at which point the user must re‑enter the token. Uncertainty: wheth
Goal: Configure a Firebird 3 server so that remote clients using the Srp authentication plugin can connect securely while legacy clients that rely on Legacy_Auth are also able to authenticate, without disabling WireCrypt encryption. Constraint: The server presently has AuthServer set to Srp only and WireCrypt set to Required; legacy clients receive a connect
aerospike
android
ssh
pypi
appcelerator
xamarin
gitkraken
firebird