Sometimes also called magic links, these login links provide a way for a user to log in without the need of password entering. Basic workflow Instead of a "password reset" button to send you a mail to confirm your password…
Tag: Authentication
TinyAuth and CakePHP authentication plugin
Over 13 years ago I wrote about my TinyAuth plugin as enhancement to the core Auth component, at the time the state of the art auth tool you needed for a quick auth setup in Cake apps. Lets revisit that…
CakePHP and connecting to GitHub API
I had to write a small tool to automate releasing certain GitHub repositories, and for that to authenticate I had to connect to GitHub API. The integration wasn’t super-easy as there was no documentation yet on how this could be…
ACL – Access Control Lists – revised
With a focus on CakePHP application development. Authentication vs Authorization Those two are often confused. So here a little preface: Authentication always comes first. It is about whether you are logged in or not. At this point it is not…
Auth – inline authorization the easy way
I wrote a wrapper class to make inline authorization easier. Often times you want to check on certain roles inside an action or view and depending on the result display specific content or execute specific code. As an example we…
More persistent sessions in Cake2.x
This has been an issue for me way too long. I always hated the fact that users are logged out almost every few hours. Compared to other sites on the www it was ridiculously short, no matter how long you…
TinyAuth – The fastest and easiest authorization for CakePHP
Note: This is for CakePHP 2.x, for 3.x please see the bottom of the article. The CakePHP built in row based CRUD auth is way too powerful and way too slow and memory consuming. In 99% of all cases there…