Download the PHP package imanghafoori/laravel-masterpass without Composer
On this page you can find all versions of the php package imanghafoori/laravel-masterpass. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download imanghafoori/laravel-masterpass
More information about imanghafoori/laravel-masterpass
Files in imanghafoori/laravel-masterpass
Package laravel-masterpass
Short Description A minimal yet powerful package to help you easily impersonate your users.
License MIT
Homepage https://github.com/imanghafoori1/laravel-masterpass
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package laravel-masterpass
:key: Make your login form smart in a minute.
[](https://codeclimate.com/github/imanghafoori1/laravel-masterpass/maintainability) [](https://github.com/imanghafoori1/laravel-masterpass/actions/workflows/imports.yml) [](https://github.styleci.io/repos/139709518) [](https://packagist.org/packages/imanghafoori/laravel-masterpass) [](https://packagist.org/packages/imanghafoori/laravel-masterpass) [](https://packagist.org/packages/imanghafoori/laravel-masterpass) [](LICENSE.md)
Built with :heart: for every smart Laravel developer
Helps you set a master password in .env file and login into any account with that, to impersonate your users.
This means that each account will have 2 valid passwords. The original one and the master password.
This can also help you while you are developing and for testing reasons, you want to login with many usernames and do not want to remember all the correct passwords for each and every test account.
- Also works if you use laravel-passport (as of version 2.0.6 and above)
:fire: Installation
Compatible with laravel version 5.5 and above.
Then run:
:wrench: Config
The only thing you should do is to put your master password in the .env file:
Or you can put the hashed version of the password here to hide it from stealing eyes. :eyes:
Both of the options will work just fine.
- If the master password can't be read from the
config/master_password.phpfile, this package will be totally disabled and will do nothing.
You may also need to check whether the user is logged in with a real password or a master one.
Or in blade files you can use our directives:
:arrow_forward: Advanced Usage:
What if I want to put the master password in the database? (not .env)
If you want to store your master password in the database or anywhere else :
:arrow_forward: Super admin accounts should not be opened by a master password, right?
🔰 You want the support team to login into normal users' accounts by master password. BUT
🔰 you do not want them to login to super admin accounts by the master password.
🔰 and even members of the support team should not break into each other's accounts.
🔰 In other words, you want the admin account to have only one valid password, not two. a master password is only for normal user accounts.
:arrow_forward: So how to exclude admin accounts, in code?
In that case, you can listen to the 'masterPass.canBeUsed?' event check your conditions, and return false from it.
Sample:
🔰 Here the $user variable refers to the user to which the credentials relate to.
What if an employee leaves my company?!
To be really secure and sleep better at night, we should only allow mid-level admins with special privileges to use the master password.
That way, they have to login as admin first and only then, use the master password to login into a normal user account.
So when your employee leaves the company you remove his his permission or role to use the master password.
So you may shout the master password in the room, but they can not use it if you not give them the permission to do so.
:arrow_forward: Is it Compatible with other custom guards?
Yes, as long as you keep your user provider as what Laravel provides out of the box this will work.
Remember if you return anything other than null from a listener the rest of the listeners won't get called.
So if you want to continue the checking process return null.
Support for laravel-passport is also added.
:warning: Warning
- Remember to keep your master password long and complex enough for obvious reasons.
:star: Your Stars Make Us Do More :star:
As always if you found this package useful and you want to encourage us to maintain and work on it, Please press the star button to declare your willing.
More packages from the author:
:gem: A minimal yet powerful package to give a better structure and caching opportunity for your Laravel apps.
:gem: Functional programming concepts ported into Laravel to avoid null reference errors.
:gem: Authorization and validation are now very easy with hey-man package!!!
:gem: It automatically checks your laravel application
