No longer actively maintained.
Identify is a complete authentication system with session management and cryptographic libraries. It including many third-party library.
The surikat session handler is independent from native php session and use a strong random id cookie which is regenerated when $cookieLifetime expire. Unlike native php session it allow you to use a session over any length you want, like one year for example, and it integrate an anti-bruteforce system with attempts records based on hashed ip.
$name = 'redcat';
$cookieLifetime = 3600; // 1 hour
$sessionLifetime = 43200; // 1 year
$session = new \\RedCat\\Identify\\Session($name,$cookieLifetime,$sessionLifetime);
if(isset($session['var']))
var\_dump( $session['var'] );
$session['var'] = 'value';
Here is the main authentication API which you can use with Auth class.
$auth->login($login, $password, $lifetime=0);
$auth->loginRoot($password,$lifetime=0);
$auth->loginPersona($email,$lifetime=0);
$auth->register($email, $login, $password, $repeatpassword, $name=null);
$auth->activate($key);
$auth->requestReset($email);
$auth->logout();
$auth->getHash($string, $salt);
$auth->getUID($login);
$auth->getUser($uid);
$auth->deleteUser($uid, $password);
$auth->validateLogin($login);
$auth->validateDisplayname($login);
$auth->resetPass($key, $password, $repeatpassword);
$auth->resendActivation($email);
$auth->changePassword($uid, $currpass, $newpass, $repeatnewpass);
$auth->getEmail($uid);
$auth->changeEmail($uid, $email, $password);
$auth->getRight();
$auth->setRight($r);
$auth->connected();
$auth->allowed($d);
$auth->allow($d);
$auth->deny($d);
$auth->lock($r,$redirect=true);
First parameter correspond to RedCat\Identify\Auth rights constants. You can use them directly, or if you use string (like in example) it will be automaticaly converted to corresponding constant. The rights constants are Auth::RIGHT_MANAGE, Auth::RIGHT_EDIT, Auth::RIGHT_MODERATE, Auth::RIGHT_POST.
The second parameter (true by default) is for enable GET redirection to avoid re-POST on refresh.
$authServer = new \\RedCat\\Identify\\AuthServer;
$authServer->htmlLock('RIGHT\_MANAGE',true);
Following example is for use inside a code (off course with ob-implicit-flush setted to false). It will handle authentication process, from locking with authentication window to logout button ouput. Put the code where you want button to appear.
$authServer->lougoutBTN();
For handle signup and login process:
$authServer->action();
For get identity:
$session = $authServer->getSession();
$identity = $session['\_AUTH\_'];
For handle reset password request:
$authServer->resetreq();
For handle reset password confirmation:
$authServer->resetpass();
For logout:
$authServer->getAuth()->logout()
And, in any context, to get result message:
echo $authServer->getResultMessage(true);
PHPMailer - A full-featured email creation and transfer class for PHP.
PHPMailer is a third party toolbox. See the official PHPMailer and examples. There is simple facade class in RedCat\Identify namespace for use PHPMailer in simplicity:
$mailer = new RedCat\\Identify\\PHPMailer(
$fromEmail,$fromName,
$replyEmail,$replyName,
$host,$port,$username,$passowrd,$secure,
$sendmail,
$debug,$exceptions
);
$mailer->mail($email, $subject, $message, $html=true);
RandomLib - A library for generating random numbers and strings.
RandomLib is a third party toolbox. See the official RandomLib
SecurityLib is a third party toolbox (dependency of RandomLib). See the official SecurityLib
PhpSecLib - PHP Secure Communications Library.
PhpSecLib is a third party cryptography toolbox. See the official PhpSecLib