Authentication, authorization and access control for PHP.

Features

• Multiple authorization strategies, like groups (for acl) and levels.
• Authorization context (eg. "is the user an admin of this team").
• PSR-14 events for login and logout.
• PSR-15 middleware for access control.
• Session invalidation, explicit or implicit (eg. after password change).
• Multi-factor authentication support.
• Confirmation tokens for sign up confirmation and forgot-password.
• PSR-3 logging of interesting events.
• Customizable to meet the requirements of your application.

Install using composer

composer require jasny/auth

Auth is a composition class. It takes an authz, storage, and optionally a confirmation service.

use Jasny\Auth\Auth;
use Jasny\Auth\Authz\Levels;

$levels = new Levels(['user' => 1, 'moderator' => 10, 'admin' => 100]);
$auth = new Auth($levels, new AuthStorage());

session_start();
$auth->initialize();

// Later...
if (!$auth->is('admin')) {
    http_response_code(403);
    echo "Access denied";
    exit();
}

The Auth service isn't usable until it's initialized. This should be done after the session is started.

session_start();
$auth->initialize();

• Setup
• Authentication
• Context
• Authorization
• Sessions
• Middleware (for access control)
• Multi-factor authentication
• Confirmation (eg. forgot password)
• Logging