Download the PHP package skyline/security without Composer
On this page you can find all versions of the php package skyline/security. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package security
Skyline Security
The Skyline Security Package provides several services to increase your application's security.
Skyline Security adds the security service to use in your action controllers.
Install
Manual created applications do not install the security package automatically.
You can easy add them using composer:
How it works
The Skyline Security package has two functions:
- Manage access control to your application
- Protect html forms against cross site request forgery
Manage Access
Skyline Security uses three phases for access control
Phase 1: Identification
Who is requesting?
There are several possibilities to detect the identity of a requesting client:
- Anonymous: You don't know who it is, but the identity is always the same
- Remember Me: An identity created from remember me information
- Session: An identity for the current session
- HTTP: Basic and Digest identities specified by HTTP/1.0
- HTML Form Login
- API Keys
All identities must specify a token (usually a username, but can be anything). This identifies a client.
Identities also specify a reliability.
Phase 2: Authentication
Does Skyline CMS know someone with this token (username)?
For this Skyline Security needs user providers that know registered users by token.
If Skyline knows a user with a given identity, it tries to authenticate the identity using its credentials.
Now the credentials are wrong, the authentication phase will break and send an authentication challenge to the client.
But if the credentials matched, phase 3 takes place
Phase 3: Authorization
Is the user allowed to perform the desired action?
Skyline Security knows voters to decide, if the request is granted or denied.
The package ships with a role system.
You as administrator can assign as many roles as you want to users.
After that, every action in an action controller can require roles. So now Skyline Security only grant access to the desired action if the user has all required roles.
Cross Site Request Forgery
Special Thanks To
- Symfony ( Copyright (c) 2004-2019 Fabien Potencier )
All versions of security with dependencies
skyline/kernel Version ^8
symfony/http-foundation Version ^6
tasoft/cached-generator Version ^0.9
ext-openssl Version *