Download the PHP package laasti/warden without Composer
On this page you can find all versions of the php package laasti/warden. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download laasti/warden
More information about laasti/warden
Files in laasti/warden
Package warden
Short Description A PHP framework agnostic authentication and authorization package.
License MIT
Informations about the package warden
Laasti/warden
A PHP framework agnostic authentication and authorization package. It does not and will never provide any way to create users. By default, it simply reads the users table in the provided database. You are free to use whatever method fits you best (PDO, ORMs...).
It is a pretty simple library. You won't find any advanced security features like in Sentinel, at least for now. The password are hashed using the latest password_ functions from PHP 5.5.
Keep in mind though that you should ensure your sessions are well protected against known vulnerabilities. You should also add an activation and reset mechanism. This package might provide them in the future. A throttling mechanism against brute force attacks can also increase the security.
Installation
The native hasher makes use of PHP 5.5 password_* functions.
For PHP 5.4, you need another library:
Usage
Roles should be UPPERCASED and permissions, lowercased.
Uses PHP's native sessions, just be sure to register a session handler using SessionHandlerInterface and session_set_save_handler() or you can implement your own SessionInterface
Uses PHP 5.5's native password functions by default, for backward compatibility you will require ircmaxell/password-compat or you can provide your own HasherInterface
Provides a basic PDO repository to retrieve users from database, but you can create your own RepositoryInterface
Contributing
- Fork it!
- Create your feature branch:
git checkout -b my-new-feature
- Commit your changes:
git commit -am 'Add some feature'
- Push to the branch:
git push origin my-new-feature
- Submit a pull request :D
History
See CHANGELOG.md for more information.
Credits
Author: Sonia Marquette (@nebulousGirl)
License
Released under the MIT License. See LICENSE.txt file.