Basic Authentication adapter for AuthComponent.
Provides Basic HTTP authentication support for AuthComponent. Basic Auth will authenticate users against the configured userModel and verify the username and passwords match.
Load AuthComponent in your controller's initialize() and add 'Basic' in 'authenticate' key
$this->loadComponent('Auth', [
'authenticate' => ['Basic']
'storage' => 'Memory',
'unauthorizedRedirect' => false,
]); You should set storage to Memory to prevent CakePHP from sending a session cookie to the client.
You should set unauthorizedRedirect to false. This causes AuthComponent to throw a ForbiddenException exception instead of redirecting to another page.
Since HTTP Basic Authentication is stateless you don't need call setUser() in your controller. The user credentials will be checked on each request. If valid credentials are not provided, required authentication headers will be sent by this authentication provider which triggers the login dialog in the browser/client.
_defaultConfig, _needsPasswordRehash, _passwordHasher, _registry _config, _configInitialized _tableLocator Authenticate a user using HTTP auth. Will use the configured User model and attempt a login using HTTP auth.
authenticate( Cake\Http\ServerRequest $request , Cake\Http\Response $response )
Authenticate a user using HTTP auth. Will use the configured User model and attempt a login using HTTP auth.
Cake\Http\ServerRequest $request Cake\Http\Response $response getUser( Cake\Http\ServerRequest $request )
Get a user based on information in the request. Used by cookie-less auth for stateless clients.
Cake\Http\ServerRequest $request Cake\Auth\BaseAuthenticate::getUser() loginHeaders( Cake\Http\ServerRequest $request )
Generate the login headers
Cake\Http\ServerRequest $request unauthenticated( Cake\Http\ServerRequest $request , Cake\Http\Response $response )
Handles an unauthenticated access attempt by sending appropriate login headers
Cake\Http\ServerRequest $request Cake\Http\Response $response Cake\Http\Exception\UnauthorizedExceptionCake\Auth\BaseAuthenticate::unauthenticated() __construct( Cake\Controller\ComponentRegistry $registry , array $config = [] )
Constructor
Cake\Controller\ComponentRegistry $registry $config optional [] _findUser( string $username , string|null $password = null )
Find a user record using the username and password provided.
Input passwords will be hashed even when a user doesn't exist. This helps mitigate timing attacks that are attempting to find valid usernames.
$username $password optional null The password, if not provided password checking is skipped and result of find is returned.
_query( string $username )
Get query object for fetching user from database.
$username Cake\ORM\QueryimplementedEvents( )
Returns a list of all events that this authenticate class will listen to.
An authenticate class can listen to following events fired by AuthComponent:
Auth.afterIdentify - Fired after a user has been identified using one of configured authenticate class. The callback function should have signature like afterIdentify(Event $event, array $user) when $user is the identified user record.
Auth.logout - Fired when AuthComponent::logout() is called. The callback function should have signature like logout(Event $event, array $user) where $user is the user about to be logged out.
[].Cake\Event\EventListenerInterface::implementedEvents() needsPasswordRehash( )
Returns whether or not the password stored in the repository for the logged in user requires to be rehashed with another algorithm
passwordHasher( )
Return password hasher object
Cake\Auth\AbstractPasswordHasherIf password hasher class not found or it does not extend AbstractPasswordHasher
_configDelete( string $key )
Deletes a single config key.
$key Cake\Core\Exception\Exception_configRead( string|null $key )
Reads a config key.
$key _configWrite( string|array $key , mixed $value , boolean|string $merge = false )
Writes a config key.
$key $value $merge optional false True to merge recursively, 'shallow' for simple merge, false to overwrite, defaults to false.
Cake\Core\Exception\Exceptionconfig( string|array|null $key = null , mixed|null $value = null , boolean $merge = true )
Gets/Sets the config.
Reading the whole config:
$this->config();
Reading a specific value:
$this->config('key'); Reading a nested value:
$this->config('some.nested.key'); Setting a specific value:
$this->config('key', $value); Setting a nested value:
$this->config('some.nested.key', $value); Updating multiple config settings at the same time:
$this->config(['one' => 'value', 'another' => 'value']);
$key optional null $value optional null $merge optional true Cake\Core\Exception\ExceptionconfigShallow( string|array $key , mixed|null $value = null )
Merge provided config with existing config. Unlike config() which does a recursive merge for nested keys, this method does a simple merge.
Setting a specific value:
$this->configShallow('key', $value); Setting a nested value:
$this->configShallow('some.nested.key', $value); Updating multiple config settings at the same time:
$this->configShallow(['one' => 'value', 'another' => 'value']);
$key $value optional null getConfig( string|null $key = null , mixed $default = null )
Returns the config.
Reading the whole config:
$this->getConfig();
Reading a specific value:
$this->getConfig('key'); Reading a nested value:
$this->getConfig('some.nested.key'); Reading with default value:
$this->getConfig('some-key', 'default-value'); $key optional null $default optional null setConfig( string|array $key , mixed|null $value = null , boolean $merge = true )
Sets the config.
Setting a specific value:
$this->setConfig('key', $value); Setting a nested value:
$this->setConfig('some.nested.key', $value); Updating multiple config settings at the same time:
$this->setConfig(['one' => 'value', 'another' => 'value']);
$key $value optional null $merge optional true Cake\Core\Exception\ExceptiongetTableLocator( )
Gets the table locator.
Cake\ORM\Locator\LocatorInterfacesetTableLocator( Cake\ORM\Locator\LocatorInterface $tableLocator )
Sets the table locator.
Cake\ORM\Locator\LocatorInterface $tableLocator tableLocator( Cake\ORM\Locator\LocatorInterface $tableLocator = null )
Sets the table locator. If no parameters are passed, it will return the currently used locator.
Cake\ORM\Locator\LocatorInterface $tableLocator optional null Cake\ORM\Locator\LocatorInterface
© 2005–present The Cake Software Foundation, Inc.
Licensed under the MIT License.
CakePHP is a registered trademark of Cake Software Foundation, Inc.
We are not endorsed by or affiliated with CakePHP.
https://api.cakephp.org/3.8/class-Cake.Auth.BasicAuthenticate.html