PHP download

Download the PHP package jeanmarcos/module-admin-bypass without Composer

On this page you can find all versions of the php package jeanmarcos/module-admin-bypass. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

Table of contents
Download jeanmarcos/module-admin-bypass
More information about jeanmarcos/module-admin-bypass
Files in jeanmarcos/module-admin-bypass

Vendor jeanmarcos
Package module-admin-bypass
Short Description Magento 2 development module that bypasses admin authentication and auto-logs in a hardcoded developer user. For local development only — guarded against production mode.
License MIT

Keywords admin development auth magento autologin bypass dev-tools magento2 magento-2

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:

If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.

Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
To use Composer is sometimes complicated. Especially for beginners.
Composer needs much resources. Sometimes they are not available on a simple webspace.
If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.

Please rate this library. Is it a good library?

Informations about the package module-admin-bypass

📦 jeanmarcos/module-admin-bypass — published to Packagist.

🏠 Source repository for issues, PRs and releases: jeanmarcos-dev/magento-local-development. The standalone jeanmarcos-dev/module-admin-bypass repo is a read-only mirror auto-generated by CI on every release — direct commits to it are overwritten.

Development_AdminBypass

⚠️ FOR LOCAL DEVELOPMENT ONLY — NEVER ENABLE IN PRODUCTION

Bypasses Magento 2 admin authentication and auto-logs in a hardcoded development user (local / local123) whenever the admin login page is visited.

What it does

BypassAdminAuthentication (plugin around on Magento\User\Model\User::verifyIdentity) — accepts any password for any existing admin user.
AdminAutologin (plugin around on Magento\Backend\Controller\Adminhtml\Auth\Login::execute) — when /admin is visited and nobody is logged in, creates the admin user local (password local123, email [email protected], role Administrators) if missing and authenticates as that user. Redirects to */dashboard.

Safety model

This module is guarded by Magento's application mode:

Mode	`Allow in Production` flag	Behavior
`developer` / `default`	any	active — bypass and autologin work
`production`	`No` (default)	inactive — Magento behaves normally, no user is created
`production`	`Yes`	active — explicit override (use at your own risk)

The guard is implemented in Development_Core (Development\Core\Model\ProductionGuard::isEnabled()) and wired into every plugin via a virtualType in etc/di.xml that binds it to the config path development/admin_bypass/allow_in_production. In production + flag off, the plugins short-circuit with $proceed(...) and do not create the local user nor touch authentication.

Configuration

Panel path: Stores → Configuration → ⚠ Development Modules → Admin Bypass → General → Allow in Production

Default: No.
Changing this flag requires bin/magento cache:clean config to take effect.

Install

Kill switch (strongly recommended before any deploy)

The disable path is the last line of defense — it removes the module entirely regardless of the allow_in_production flag.

For permanent removal:

Security risks (read before using)

Anyone who can reach /admin gains full Administrators access when the bypass is active. No password needed.
The hardcoded local/local123 admin user persists in the database once created, even after disabling the module.
Credentials are in plain text in Plugin/AdminAutologin.php and are searchable in git history.

After disabling the module in a shared environment, consider deleting the local admin user manually:

File structure

The production-guard helper lives in the shared core package jeanmarcos/module-core-local-development.

Troubleshooting

Toggle doesn't take effect: bin/magento cache:clean config.
Bypass still works after module:disable: check app/etc/config.php for the module entry; run setup:upgrade.
Autologin loops: another plugin on Login::execute may be conflicting; inspect generated/code/Magento/Backend/Controller/Adminhtml/Auth/Login/Interceptor.php.

Compatibility

Magento 2.4.x
PHP 8.1+ (uses constructor property promotion and readonly properties)
Depends on jeanmarcos/module-core-local-development (installed automatically by Composer).

License

MIT

All versions of module-admin-bypass with dependencies

PHP Build Version

Package Version

Version 1.1.0 Release 27. Apr 2026
create-project require 0 people chose require and
0 people chose create-project.

Download

Download latest version of module-admin-bypass from vendor jeanmarcos

Requires php Version ~8.1.0||~8.2.0||~8.3.0
magento/framework Version >=103.0
magento/module-backend Version *
magento/module-user Version *
magento/module-authorization Version *
magento/module-config Version *
jeanmarcos/module-core-local-development Version ^1.0

Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package jeanmarcos/module-admin-bypass contains the following files

Loading the files please wait ...