From 81dc07fabde178ee40a1ddfff5dfd74c5021347f Mon Sep 17 00:00:00 2001 From: Azul Date: Tue, 3 Jul 2012 15:40:21 +0200 Subject: more info and resources on the index page bit of styling added --- example/public/example.css | 25 ++++++++++++ example/public/glyphicons-halflings.png | Bin 0 -> 13826 bytes example/views/index.erb | 67 +++++++++++++++++++++++--------- example/views/layout.erb | 1 + 4 files changed, 74 insertions(+), 19 deletions(-) create mode 100644 example/public/example.css create mode 100644 example/public/glyphicons-halflings.png diff --git a/example/public/example.css b/example/public/example.css new file mode 100644 index 0000000..265028b --- /dev/null +++ b/example/public/example.css @@ -0,0 +1,25 @@ +section { + padding-top: 20px; +} + +[class^="icon-"], [class*=" icon-"] { + background-image: url("glyphicons-halflings.png"); +} + +.with-icons { + list-style: none; + padding-top: 20px; +} + +.with-icons i { + margin: 5px; +} +.with-icons li { + font-size: 18px; + line-height: 35px; + +} + +.btn { + margin-bottom: 15px; +} diff --git a/example/public/glyphicons-halflings.png b/example/public/glyphicons-halflings.png new file mode 100644 index 0000000..79bc568 Binary files /dev/null and b/example/public/glyphicons-halflings.png differ diff --git a/example/views/index.erb b/example/views/index.erb index 0ff91e1..d35bd85 100644 --- a/example/views/index.erb +++ b/example/views/index.erb @@ -1,50 +1,79 @@ - +
-
-

1. Signup

-

- Your browser transfers an encrypted verifier based your password. But it does not send the password itself. -

+
+

Features

+
    +
  • Mutual handshake - validates server on login
    • +
  • Using strong cryptography
    • +
  • No eavesdropping on the network
    • +
  • Challange response prevents replay attacs
    • +
  • Seeding prevents dictionary attacs on the server
    • +
-

2. Login

+

Resources

- You enter your password - your browser exchanges encrypted data with the site to check if it was the right one. + Official website at Stanford

-
-
-

3. Verify

- You can see from the logs that your password was not send. The login process is different each time so it can't be replayed. + Wikipedia Article on SRP

+

Libraries and Implementations:

+
+
+
+

Try it ... It works just like a normal password - but it's more save.

+

1. Signup

+

+ Your browser transfers an encrypted verifier based your password. But it does not send the password itself. +

<% if @user %>

You are signed up as <%= @user.login %>.

<% end %> + <%= button_link(:signup, :primary => !@user) %>
+

2. Login

+

+ You enter your password - your browser exchanges encrypted data with the site to check if it was the right one. +

<% if @user && @user.active %>

You are logged in.

<% end %> + <%= button_link(:login, :primary => @user && !@user.active) %>
+

3. Verify

+

+ You can see from the logs that your password was not send. The login process is different each time so it can't be replayed. +

+ <%= button_link(:verify, :primary => @user && @user.active) %>
- <%= button_link(:signup, :primary => !@user) %>
- <%= button_link(:login, :primary => @user && !@user.active) %>
- <%= button_link(:verify, :primary => @user && @user.active) %>
- - - - +
+
+
+
diff --git a/example/views/layout.erb b/example/views/layout.erb index 6b56eac..2b4e8f2 100644 --- a/example/views/layout.erb +++ b/example/views/layout.erb @@ -5,6 +5,7 @@ Secure remote password + -- cgit v1.2.3