I intend building an application using CodeIgniter so I'm currently identifying all the features I want. I would like to know if there are any recommendations for Authentication & Authorization libraries for CodeIgniter.
相关问题
- java client program to send digest authentication
- PHP persistent login - Do i reissue a cookie after
- How to handle “App is temporarily blocked from log
- How to use strip_tags with second parameter in Cod
- codeigniter replace array values in model
相关文章
- Securing REST endpoint using spring security
- Private static variables in php class
- User.Identity.IsAuthenticated vs WebSecurity.IsAut
- SwiftUI - Vertical Centering Content inside Scroll
- Override UserManager in django
- GuzzleHttp Hangs When Using Localhost
- Your application has authenticated using end user
- Codeigniter not logging
Have a look at http://bambooinvoice.org, he is using Site_sentry library for authentication, but if you want more security you can use storing sessions in the database.
Ion Auth is currently one of the more attractive options. It's lean, widely used, actively maintained and has a good feature set.
Honestly, I've used several of them, and always end up rolling my own. Nothing every seems to do exactly what I want.
If you are in desperate need of a good auth_lib and don't want to roll your own, I'd suggest http://codeigniter.com/forums/viewthread/112654/
From this more recently updated question: How should I choose an authentication library for CodeIgniter? ,the best is Tank Auth.
First it should be noted that authorization is not equivalent to authentication - as these terms and their definitions are frequently confused. Authorization != Authentication
Other answers gave a lot of different authentication libraries, so I skip that.
Great resource of general knowledge about Authorization e.g. Access Control
http://owasp.org/index.php/Access_Control_Cheat_Sheet
Codeigniter Authorization library
https://code.google.com/p/ar-acl/
This for sure is not the best authorization library for CI. I have not even used it. It is merely a Google search engine opinion ;) Seems to be quite simple and not very scalable. It does not even use database for storing different roles. So I do not reccommend it.
I believe 'best' is matter of opinion and purpose. My own opinion is that you should decide by your application needs. There is always an option to make one of your own, designed specifically by the needs of your application.
There are only a few active user authentication systems in CodeIgniter, the most used of which is Ion Auth which picked up where Redux Auth BETA 2 left off a year or two ago.
I have used it on a large number of projects and it can be flexible enough for most needs. It's compatible with CI 2.0, incredibly lightweight and all bugs are fixed within a few hours or days too.
Others are Tank Auth and DX Auth.
I'd strongly advise against using the library Zack suggested. Adam is a great programmer but the whole logic behind that library is fubar and as far as I know not even he has used this library to create any actual websites.
Ion Auth is in place on several sites serving thousands of logins a day and running smooth. :)