TorqueScript Authentication

[Xalos]

I want to be able to authenticate a user logging into a service so that others can't get into his stuff. However, I also want to be able to have that same user be able to log into a webpage to view the same information.

The problem is that I ultimately come back to the same solution, which happens to be (as far as I can see) virtually impossible in TorqueScript - implement RSA or SSL into TorqueScript.


Does anyone have a method of authentication that will work for people logging in both from inside Blockland and from a webpage?
Or do I have to resort to hacky badness to get things working the way that I want?

[Ad Bot]

[Zeblote]

Or do I have to resort to hacky badness to get things working the way that I want?

This

From blockland, your server can just send their name to the auth server - easy.
But for the webpage, you'll need a user and a password ... so may they have to get in from blockland for the first time to create the password?

[Fluff-is-back]

This

From blockland, your server can just send their name to the auth server - easy.
But for the webpage, you'll need a user and a password ... so may they have to get in from blockland for the first time to create the password?

Could you not have the web side contact the master server with the IP used? Then use that to allow access to the webpage?

[Zeblote]

Could you not have the web side contact the master server with the IP used? Then use that to allow access to the webpage?

But then they would need to have blockland on in the background to use the site

[Xalos]

Where even is the authentication server?

[Port]

Where even is the authentication server?

http://auth.blockland.us

The specific endpoint they're referring to is POST http://auth.blockland.us/authQuery.php with NAME=...&IP=... in the body, IIRC.

[Fluff-is-back]

http://auth.blockland.us

The specific endpoint they're referring to is POST http://auth.blockland.us/authQuery.php with NAME=...&IP=... in the body, IIRC.

$res = http_post_fields("http://auth.blockland.us/authQuery.php", array(
                        "NAME" => $name,
                        "IP" => $ip
                         ));


yep