Form authentication adapter for AuthComponent.
Allows you to authenticate users based on form POST data. Usually, this is a login form that users enter information into.
Load AuthComponent
in your controller's initialize()
and add 'Form' in 'authenticate' key
$this->loadComponent('Auth', [ 'authenticate' => [ 'Form' => [ 'fields' => ['username' => 'email', 'password' => 'passwd'], 'finder' => 'auth', ] ] ]);
When configuring FormAuthenticate you can pass in config to which fields, model and finder are used. See BaseAuthenticate::$_defaultConfig
for more information.
_defaultConfig
, _needsPasswordRehash
, _passwordHasher
, _registry
_config
, _configInitialized
_tableLocator
Authenticates the identity contained in a request. Will use the config.userModel
, and config.fields
to find POST data that is used to find a matching record in the config.userModel
. Will return false if there is no post data, either username or password is missing, or if the scope conditions have not been met.
_checkFields( Cake\Http\ServerRequest $request , array $fields )
Checks the fields to ensure they are supplied.
Cake\Http\ServerRequest
$request
$fields
authenticate( Cake\Http\ServerRequest $request , Cake\Http\Response $response )
Authenticates the identity contained in a request. Will use the config.userModel
, and config.fields
to find POST data that is used to find a matching record in the config.userModel
. Will return false if there is no post data, either username or password is missing, or if the scope conditions have not been met.
Cake\Http\ServerRequest
$request
Cake\Http\Response
$response
__construct( Cake\Controller\ComponentRegistry $registry , array $config = [] )
Constructor
Cake\Controller\ComponentRegistry
$registry
$config
optional [] _findUser( string $username , string|null $password = null )
Find a user record using the username and password provided.
Input passwords will be hashed even when a user doesn't exist. This helps mitigate timing attacks that are attempting to find valid usernames.
$username
$password
optional null The password, if not provided password checking is skipped and result of find is returned.
_query( string $username )
Get query object for fetching user from database.
$username
Cake\ORM\Query
getUser( Cake\Http\ServerRequest $request )
Get a user based on information in the request. Primarily used by stateless authentication systems like basic and digest auth.
Cake\Http\ServerRequest
$request
implementedEvents( )
Returns a list of all events that this authenticate class will listen to.
An authenticate class can listen to following events fired by AuthComponent:
Auth.afterIdentify
- Fired after a user has been identified using one of configured authenticate class. The callback function should have signature like afterIdentify(Event $event, array $user)
when $user
is the identified user record.
Auth.logout
- Fired when AuthComponent::logout() is called. The callback function should have signature like logout(Event $event, array $user)
where $user
is the user about to be logged out.
[]
.Cake\Event\EventListenerInterface::implementedEvents()
needsPasswordRehash( )
Returns whether or not the password stored in the repository for the logged in user requires to be rehashed with another algorithm
passwordHasher( )
Return password hasher object
Cake\Auth\AbstractPasswordHasher
If password hasher class not found or it does not extend AbstractPasswordHasher
unauthenticated( Cake\Http\ServerRequest $request , Cake\Http\Response $response )
Handle unauthenticated access attempt. In implementation valid return values can be:
Cake\Http\ServerRequest
$request
Cake\Http\Response
$response
_configDelete( string $key )
Deletes a single config key.
$key
Cake\Core\Exception\Exception
_configRead( string|null $key )
Reads a config key.
$key
_configWrite( string|array $key , mixed $value , boolean|string $merge = false )
Writes a config key.
$key
$value
$merge
optional false True to merge recursively, 'shallow' for simple merge, false to overwrite, defaults to false.
Cake\Core\Exception\Exception
config( string|array|null $key = null , mixed|null $value = null , boolean $merge = true )
Gets/Sets the config.
Reading the whole config:
$this->config();
Reading a specific value:
$this->config('key');
Reading a nested value:
$this->config('some.nested.key');
Setting a specific value:
$this->config('key', $value);
Setting a nested value:
$this->config('some.nested.key', $value);
Updating multiple config settings at the same time:
$this->config(['one' => 'value', 'another' => 'value']);
$key
optional null $value
optional null $merge
optional true Cake\Core\Exception\Exception
configShallow( string|array $key , mixed|null $value = null )
Merge provided config with existing config. Unlike config()
which does a recursive merge for nested keys, this method does a simple merge.
Setting a specific value:
$this->configShallow('key', $value);
Setting a nested value:
$this->configShallow('some.nested.key', $value);
Updating multiple config settings at the same time:
$this->configShallow(['one' => 'value', 'another' => 'value']);
$key
$value
optional null getConfig( string|null $key = null , mixed $default = null )
Returns the config.
Reading the whole config:
$this->getConfig();
Reading a specific value:
$this->getConfig('key');
Reading a nested value:
$this->getConfig('some.nested.key');
Reading with default value:
$this->getConfig('some-key', 'default-value');
$key
optional null $default
optional null setConfig( string|array $key , mixed|null $value = null , boolean $merge = true )
Sets the config.
Setting a specific value:
$this->setConfig('key', $value);
Setting a nested value:
$this->setConfig('some.nested.key', $value);
Updating multiple config settings at the same time:
$this->setConfig(['one' => 'value', 'another' => 'value']);
$key
$value
optional null $merge
optional true Cake\Core\Exception\Exception
getTableLocator( )
Gets the table locator.
Cake\ORM\Locator\LocatorInterface
setTableLocator( Cake\ORM\Locator\LocatorInterface $tableLocator )
Sets the table locator.
Cake\ORM\Locator\LocatorInterface
$tableLocator
tableLocator( Cake\ORM\Locator\LocatorInterface $tableLocator = null )
Sets the table locator. If no parameters are passed, it will return the currently used locator.
Cake\ORM\Locator\LocatorInterface
$tableLocator
optional null Cake\ORM\Locator\LocatorInterface
© 2005–present The Cake Software Foundation, Inc.
Licensed under the MIT License.
CakePHP is a registered trademark of Cake Software Foundation, Inc.
We are not endorsed by or affiliated with CakePHP.
https://api.cakephp.org/3.8/class-Cake.Auth.FormAuthenticate.html