An authentication adapter for AuthComponent. Provides the ability to authenticate using POST data. Can be used by configuring AuthComponent to use it via the AuthComponent::$authenticate config.
$this->Auth->authenticate = [ 'Form' => [ 'scope' => ['Users.active' => 1] ] ]
When configuring FormAuthenticate you can pass in config to which fields, model and additional conditions are used. See FormAuthenticate::$_config for more information.
_checkFields( Cake\Network\Request $request , array $fields )
Checks the fields to ensure they are supplied.
Cake\Network\Request
$request
$fields
boolean
authenticate( Cake\Network\Request $request , Cake\Network\Response $response )
Authenticates the identity contained in a request. Will use the config.userModel
, and config.fields
to find POST data that is used to find a matching record in the config.userModel
. Will return false if there is no post data, either username or password is missing, or if the scope conditions have not been met.
Cake\Network\Request
$request
Cake\Network\Response
$response
mixed
__construct( Cake\Controller\ComponentRegistry $registry , array $config [] )
Constructor
Cake\Controller\ComponentRegistry
$registry
$config
optional [] _findUser( string $username , string|null $password null )
Find a user record using the username and password provided.
Input passwords will be hashed even when a user doesn't exist. This helps mitigate timing attacks that are attempting to find valid usernames.
$username
$password
optional null boolean|array
_query( string $username )
Get query object for fetching user from database.
$username
Cake\ORM\Query
getUser( Cake\Network\Request $request )
Get a user based on information in the request. Primarily used by stateless authentication systems like basic and digest auth.
Cake\Network\Request
$request
mixed
implementedEvents( )
Returns a list of all events that this authenticate class will listen to.
An authenticate class can listen to following events fired by AuthComponent:
Auth.afterIdentify
- Fired after a user has been identified using one of configured authenticate class. The callback function should have signature like afterIdentify(Event $event, array $user)
when $user
is the identified user record.Auth.logout
- Fired when AuthComponent::logout() is called. The callback function should have signature like logout(Event $event, array $user)
where $user
is the user about to be logged out.array
[]
.Cake\Event\EventListenerInterface::implementedEvents()
needsPasswordRehash( )
Returns whether or not the password stored in the repository for the logged in user requires to be rehashed with another algorithm
boolean
passwordHasher( )
Return password hasher object
Cake\Auth\AbstractPasswordHasher
RuntimeException
unauthenticated( Cake\Network\Request $request , Cake\Network\Response $response )
Handle unauthenticated access attempt. In implementation valid return values can be:
Cake\Network\Request
$request
Cake\Network\Response
$response
_configDelete( string $key )
Delete a single config key
$key
Cake\Core\Exception\Exception
_configRead( string|null $key )
Read a config variable
$key
mixed
_configWrite( string|array $key , mixed $value , boolean|string $merge false )
Write a config variable
$key
$value
$merge
optional false Cake\Core\Exception\Exception
config( string|array|null $key null , mixed|null $value null , boolean $merge true )
Reading the whole config:
$this->config();
Reading a specific value:
$this->config('key');
Reading a nested value:
$this->config('some.nested.key');
Setting a specific value:
$this->config('key', $value);
Setting a nested value:
$this->config('some.nested.key', $value);
Updating multiple config settings at the same time:
$this->config(['one' => 'value', 'another' => 'value']);
$key
optional null $value
optional null $merge
optional true mixed
Cake\Core\Exception\Exception
configShallow( string|array $key , mixed|null $value null )
Merge provided config with existing config. Unlike config()
which does a recursive merge for nested keys, this method does a simple merge.
Setting a specific value:
$this->config('key', $value);
Setting a nested value:
$this->config('some.nested.key', $value);
Updating multiple config settings at the same time:
$this->config(['one' => 'value', 'another' => 'value']);
$key
$value
optional null mixed
protected array
Default config for this object.
fields
The fields to use to identify a user by.userModel
The alias for users table, defaults to Users.finder
The finder method to use to fetch user record. Defaults to 'all'.passwordHasher
Password hasher class. Can be a string specifying class name or an array containing className
key, any other keys will be passed as config to the class. Defaults to 'Default'.scope
and contain
have been deprecated since 3.1. Use custom finder instead to modify the query to fetch user record.[ 'fields' => [ 'username' => 'username', 'password' => 'password' ], 'userModel' => 'Users', 'scope' => [], 'finder' => 'all', 'contain' => null, 'passwordHasher' => 'Default' ]
protected boolean
Whether or not the user authenticated by this class requires their password to be rehashed with another algorithm.
false
protected Cake\Controller\ComponentRegistry
A Component registry, used to get more components.
protected boolean
Whether the config property has already been configured with defaults
false
© 2005–2016 The Cake Software Foundation, Inc.
Licensed under the MIT License.
CakePHP is a registered trademark of Cake Software Foundation, Inc.
We are not endorsed by or affiliated with CakePHP.
http://api.cakephp.org/3.1/class-Cake.Auth.FormAuthenticate.html