What is the best Authentication and Authorization

2019-06-14 15:52发布

I intend building an application using CodeIgniter so I'm currently identifying all the features I want. I would like to know if there are any recommendations for Authentication & Authorization libraries for CodeIgniter.

7条回答
迷人小祖宗
2楼-- · 2019-06-14 16:02

Have a look at http://bambooinvoice.org, he is using Site_sentry library for authentication, but if you want more security you can use storing sessions in the database.

查看更多
叛逆
3楼-- · 2019-06-14 16:02

Ion Auth is currently one of the more attractive options. It's lean, widely used, actively maintained and has a good feature set.

查看更多
老娘就宠你
4楼-- · 2019-06-14 16:09

Honestly, I've used several of them, and always end up rolling my own. Nothing every seems to do exactly what I want.

If you are in desperate need of a good auth_lib and don't want to roll your own, I'd suggest http://codeigniter.com/forums/viewthread/112654/

查看更多
神经病院院长
5楼-- · 2019-06-14 16:15

From this more recently updated question: How should I choose an authentication library for CodeIgniter? ,the best is Tank Auth.

查看更多
地球回转人心会变
6楼-- · 2019-06-14 16:20

First it should be noted that authorization is not equivalent to authentication - as these terms and their definitions are frequently confused. Authorization != Authentication

Other answers gave a lot of different authentication libraries, so I skip that.

Great resource of general knowledge about Authorization e.g. Access Control
http://owasp.org/index.php/Access_Control_Cheat_Sheet

Codeigniter Authorization library
https://code.google.com/p/ar-acl/
This for sure is not the best authorization library for CI. I have not even used it. It is merely a Google search engine opinion ;) Seems to be quite simple and not very scalable. It does not even use database for storing different roles. So I do not reccommend it.

I believe 'best' is matter of opinion and purpose. My own opinion is that you should decide by your application needs. There is always an option to make one of your own, designed specifically by the needs of your application.

查看更多
7楼-- · 2019-06-14 16:22

There are only a few active user authentication systems in CodeIgniter, the most used of which is Ion Auth which picked up where Redux Auth BETA 2 left off a year or two ago.

I have used it on a large number of projects and it can be flexible enough for most needs. It's compatible with CI 2.0, incredibly lightweight and all bugs are fixed within a few hours or days too.

Others are Tank Auth and DX Auth.

I'd strongly advise against using the library Zack suggested. Adam is a great programmer but the whole logic behind that library is fubar and as far as I know not even he has used this library to create any actual websites.

Ion Auth is in place on several sites serving thousands of logins a day and running smooth. :)

查看更多
登录 后发表回答