Download the PHP package daycry/auth without Composer
On this page you can find all versions of the php package daycry/auth. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Package auth
Short Description Authentication for Codeigniter 4
License MIT
Homepage https://github.com/daycry/auth
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package auth
CodeIgniter Auth
Auth is an authentication and authorization framework for CodeIgniter 4. While it does provide a base set of tools that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for auth are:
- It must be very flexible and allow developers to extend/override almost any part of it.
- It must have security at its core. It is an auth lib after all.
- To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Auth provides two primary methods Session-based and Access Token authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality. This can be used for standard web applications, as well as for single page applications. Includes full controllers and basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user can have more than one. This can be used for API authentication of third-party users, and even for allowing access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication. The main advantage with HMAC is the shared Secret Key is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting information between parties as a JSON object. It is commonly used for authentication and authorization purposes in web applications.
Important Features
- Session-based authentication (traditional ID/Password with Remember-me)
- Stateless authentication using Personal Access Tokens
- Optional Email verification on account registration
- Optional Email-based Two-Factor Authentication after login
- Magic Link Login when a user forgets their password
- Flexible Groups-based access control (think Roles, but more flexible)
- Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Auth requires the following:
- A CodeIgniter 4.3.5+ based project
- Composer for package management
- PHP 7.4.3+
Installation
Installation is done through Composer.
Contributing
Auth does accept and encourage contributions from the community in any shape. It doesn't matter whether you can code, write documentation, or help find bugs, all contributions are welcome. See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have contributed in one manner or another in making Shield:
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used within this library, in no particular order:
- Google Cloud: 13 best practices for user account, authentication, and password management, 2021 edition
- NIST Digital Identity Guidelines
- Implementing Secure User Authentication in PHP Applications with Long-Term Persistence (Login with "Remember Me" Cookies)
- Password Storage - OWASP Cheat Sheet Series
All versions of auth with dependencies
codeigniter4/settings Version *
daycry/class-finder Version ^2.0
daycry/cronjob Version ^2.0
daycry/encryption Version ^2.0
daycry/exceptions Version ^1
daycry/jwt Version ^1.0