Phalcon auth

Auth\AbstractAuthDispatcherListener¶

Abstract Source on GitHub

Shared enforcement algorithm for the Cli and Mvc auth dispatcher listeners. The dispatcher-specific subclass provides only the action name from its typed dispatcher, the action-kind label used in the access-denied exception, and (Mvc only) a forward handler for Access::redirectTo().

Uses Phalcon\Auth\Exceptions\AccessDenied · Phalcon\Contracts\Auth\Manager

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct( Manager $manager );

enforce()¶

protected function enforce(
    string $actionName,
    mixed $forwardHandler = null
): bool;

Runs the access check for the given action name. Returns true when the dispatch should proceed, false when a forward was issued, and throws when access is denied without a redirect target.

getActionType()¶

abstract protected function getActionType(): string;

Returns the kind label used by AccessDenied (e.g. 'task', 'action').

Auth\Access\AbstractAccess¶

Abstract Source on GitHub

Uses Phalcon\Contracts\Auth\Access\Access · Phalcon\Contracts\Auth\Manager

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct( Manager $manager );

getExceptActions()¶

public function getExceptActions(): array;

getOnlyActions()¶

public function getOnlyActions(): array;

isAllowed()¶

public function isAllowed( string $actionName ): bool;

redirectTo()¶

public function redirectTo(): array|null;

setExceptActions()¶

public function setExceptActions( array $exceptActions = [] ): void;

setOnlyActions()¶

public function setOnlyActions( array $onlyActions = [] ): void;

Auth\Access\AccessLocator¶

Class Source on GitHub

Service locator for Phalcon\Auth access gates. Utilizes the container to obtain the service. For the Phalcon\Container\Container one can use autowiring. For the Phalcon\Di\Di, one needs to register the gates in it to be used here.

@extends AbstractLocator

Uses Phalcon\Contracts\Auth\Access\Access · Phalcon\Support\AbstractLocator

Method Summary¶

Methods¶

getExceptionClass()¶

protected function getExceptionClass(): string;

getInterfaceClass()¶

protected function getInterfaceClass(): string;

getServices()¶

protected function getServices(): array;

Auth\Access\Auth¶

Class Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Method Summary¶

Methods¶

allowedIf()¶

public function allowedIf(): bool;

Auth\Access\Guest¶

Class Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Method Summary¶

Methods¶

allowedIf()¶

public function allowedIf(): bool;

Auth\Adapter\AbstractAdapter¶

Abstract Source on GitHub

@template TConfig of AdapterConfig

Uses Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Contracts\Auth\Adapter\AdapterConfig · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Encryption\Security\Security

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    Security $hasher,
    AdapterConfig $config
);

getConfig()¶

public function getConfig(): AdapterConfig;

Returns the adapter configuration object.

getModel()¶

public function getModel(): string|null;

Returns the model class name, if configured.

validateCredentials()¶

public function validateCredentials(
    AuthUser $user,
    array $credentials
): bool;

Validates the supplied plaintext password against the user's stored hash. Concrete adapters share this implementation; if your data source needs a different verification strategy, override it.

Auth\Adapter\AbstractArrayAdapter¶

Abstract Source on GitHub

Common base for adapters whose user records come from an in-memory list (Memory and Stream). Subclasses provide the row source via loadUsers(); everything else - credentials matching, hydration, the empty-credentials guard, and a default linear retrieveById - is shared here.

@template TConfig of AdapterConfig @extends AbstractAdapter

Uses Phalcon\Auth\AuthUser · Phalcon\Contracts\Auth\Adapter\AdapterConfig · Phalcon\Contracts\Auth\AuthUser

Method Summary¶

Methods¶

retrieveByCredentials()¶

public function retrieveByCredentials( array $credentials ): AuthUserContract|null;

Walks the user list and returns the first row whose non-'password' keys all match strictly. Returns null when no row matches or when $credentials carries no identifying field at all (only 'password', or empty) - protects callers from the silent "first row wins" footgun.

retrieveById()¶

public function retrieveById( mixed $id ): AuthUserContract|null;

Default linear-scan implementation. Memory overrides this for an O(1) id-keyed lookup; Stream uses this as-is.

hasIdentifyingField()¶

protected function hasIdentifyingField( array $credentials ): bool;

Tests whether a credentials payload carries at least one identifying field (i.e. anything other than 'password'). An empty payload - or a payload that only contains 'password' - is treated as "no lookup".

hydrate()¶

protected function hydrate( array $row ): AuthUserContract;

Hydrates a raw user row into either the configured model class or a Phalcon\Auth\AuthUser value object.

loadUsers()¶

abstract protected function loadUsers(): array;

Returns the source list of user rows. Concrete subclasses decide where they come from (config array, JSON file, etc.).

matchesRow()¶

protected function matchesRow(
    array $row,
    array $credentials
): bool;

Strict per-key match of a row against credentials, skipping 'password'.

Auth\Adapter\AdapterLocator¶

Class Source on GitHub

Service locator for Phalcon\Auth adapters. Utilizes the container to obtain the service. For the Phalcon\Container\Container one can use autowiring. For the Phalcon\Di\Di, one needs to register the gates in it to be used here.

@extends AbstractLocator

Uses Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Support\AbstractLocator

Method Summary¶

Methods¶

getExceptionClass()¶

protected function getExceptionClass(): string;

getInterfaceClass()¶

protected function getInterfaceClass(): string;

getServices()¶

protected function getServices(): array;

Auth\Adapter\Config\AbstractAdapterConfig¶

Abstract Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Uses Phalcon\Contracts\Auth\Adapter\AdapterConfig

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct( string $model = null );

getModel()¶

public function getModel(): string|null;

Auth\Adapter\Config\MemoryAdapterConfig¶

Class Source on GitHub

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    array $users = [],
    string $model = null
);

getUsers()¶

public function getUsers(): array;

Auth\Adapter\Config\ModelAdapterConfig¶

Class Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Uses Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    string $model,
    string $idColumn = "id"
);

getIdColumn()¶

public function getIdColumn(): string;

getModel()¶

public function getModel(): string;

Auth\Adapter\Config\StreamAdapterConfig¶

Class Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Uses Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    string $file,
    string $model = null
);

getFile()¶

public function getFile(): string;

Auth\Adapter\Memory¶

Class Source on GitHub

In-memory adapter - useful for tests and small read-only user lists.

@extends AbstractArrayAdapter

Uses Phalcon\Auth\Adapter\Config\MemoryAdapterConfig · Phalcon\Auth\Internal\Options · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Encryption\Security\Security

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    Security $hasher,
    MemoryAdapterConfig $config
);

fromOptions()¶

public static function fromOptions(
    Security $hasher,
    array $options
): static;

retrieveById()¶

public function retrieveById( mixed $id ): AuthUser|null;

Overridden for O(1) lookup via the id index built in the constructor.

loadUsers()¶

protected function loadUsers(): array;

Auth\Adapter\Model¶

Class Source on GitHub

Phalcon Model-backed adapter.

@extends AbstractAdapter

Uses Phalcon\Auth\Adapter\Config\ModelAdapterConfig · Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\DoesNotImplement · Phalcon\Auth\Internal\Options · Phalcon\Contracts\Auth\Adapter\RememberAdapter · Phalcon\Contracts\Auth\AuthRemember · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Auth\RememberToken · Phalcon\Contracts\Encryption\Security\Security · Phalcon\Mvc\ModelInterface

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    Security $hasher,
    ModelAdapterConfig $config
);

createRememberToken()¶

public function createRememberToken( AuthUser $user ): RememberToken;

Create and persist a new remember token for the user.

fromOptions()¶

public static function fromOptions(
    Security $hasher,
    array $options
): static;

retrieveByCredentials()¶

public function retrieveByCredentials( array $credentials ): AuthUser|null;

Find a user matching the given credentials (excluding 'password' key).

retrieveById()¶

public function retrieveById( mixed $id ): AuthUser|null;

retrieveByToken()¶

public function retrieveByToken(
    mixed $id,
    string $token,
    string $userAgent = null
): AuthUser|null;

Retrieve a user by the remember-me cookie payload.

Auth\Adapter\Stream¶

Class Source on GitHub

JSON file-backed adapter.

The file must contain a JSON array of user records: [{"id":1,"email":"a@b","password":""}, ...]

@extends AbstractArrayAdapter

Uses InvalidArgumentException · Phalcon\Auth\Adapter\Config\StreamAdapterConfig · Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\FileCannotRead · Phalcon\Auth\Exceptions\FileDoesNotContainJson · Phalcon\Auth\Exceptions\FileDoesNotExist · Phalcon\Auth\Exceptions\FileNotValidJson · Phalcon\Auth\Internal\Options · Phalcon\Contracts\Encryption\Security\Security · Phalcon\Support\Helper\Json\Decode

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    Security $hasher,
    StreamAdapterConfig $config
);

fromOptions()¶

public static function fromOptions(
    Security $hasher,
    array $options
): static;

loadUsers()¶

protected function loadUsers(): array;

Loads and decodes the JSON users file. Re-read on every call - if you need caching, wrap it.

phpFileExists()¶

protected function phpFileExists( string $filename ): bool;

phpFileGetContents()¶

protected function phpFileGetContents( string $filename );

Auth\AuthUser¶

Class Source on GitHub

Lightweight value object returned by array-backed adapters (Memory, Stream) when no application model class is configured.

Uses Phalcon\Auth\Exceptions\DataMustContainIdKey · Phalcon\Contracts\Auth\AuthUser

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct( array $data );

getAuthIdentifier()¶

public function getAuthIdentifier(): int|string;

getAuthPassword()¶

public function getAuthPassword(): string;

toArray()¶

public function toArray(): array;

Returns the underlying data array.

Auth\Cli\AuthDispatcherListener¶

Class Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Uses Phalcon\Auth\AbstractAuthDispatcherListener · Phalcon\Auth\Exception · Phalcon\Cli\Dispatcher · Phalcon\Events\Event

Method Summary¶

Methods¶

beforeExecuteRoute()¶

public function beforeExecuteRoute(
    Event $event,
    Dispatcher $dispatcher
): bool;

getActionType()¶

protected function getActionType(): string;

Auth\Exception¶

Class Source on GitHub

Exceptions thrown in Phalcon\Auth will use this class

Auth\Exceptions\AccessDenied¶

Class Source on GitHub

Access denied exception

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    string $type,
    string $name
);

Auth\Exceptions\ConfigRequiresNonEmptyValue¶

Class Source on GitHub

Config requires non-empty value

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    string $configName,
    string $configKey,
    string $suffix = ""
);

Auth\Exceptions\DataMustContainIdKey¶

Class Source on GitHub

AuthUser data must contain "id"

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct();

Auth\Exceptions\DoesNotImplement¶

Class Source on GitHub

Does not implement interface

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    string $type,
    string $name
);

Auth\Exceptions\FileCannotRead¶

Class Source on GitHub

Cannot read file

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct( string $path );

Auth\Exceptions\FileDoesNotContainJson¶

Class Source on GitHub

File does not contain a JSON array

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct( string $path );

Auth\Exceptions\FileDoesNotExist¶

Class Source on GitHub

File does not exist

Uses Phalcon\Auth\Exception

Method Summary¶

Methods¶

__construct()¶

public function __construct( string $path );

Auth\Exceptions\FileNotValidJson¶

Class Source on GitHub

Not a valid JSON

Uses Phalcon\Auth\Exception · Throwable

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    string $path,
    Throwable $ex
);

Auth\Guard\AbstractGuard¶

Abstract Source on GitHub

@template TConfig of GuardConfig

Uses Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Auth\Guard\Guard · Phalcon\Contracts\Auth\Guard\GuardConfig · Phalcon\Events\AbstractEventsAware

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    Adapter $adapter,
    GuardConfig $config
);

check()¶

public function check(): bool;

getAdapter()¶

public function getAdapter(): Adapter;

getConfig()¶

public function getConfig(): GuardConfig;

Returns the guard configuration object.

getLastUserAttempted()¶

public function getLastUserAttempted(): AuthUser|null;

guest()¶

public function guest(): bool;

hasUser()¶

public function hasUser(): bool;

id()¶

public function id(): int|string|null;

setAdapter()¶

public function setAdapter( Adapter $adapter ): static;

setUser()¶

public function setUser( AuthUser $user ): static;

hasValidCredentials()¶

protected function hasValidCredentials(
    mixed $user,
    array $credentials
): bool;

user should be ?AuthUser

Auth\Guard\Config\AbstractGuardConfig¶

Abstract Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Uses Phalcon\Contracts\Auth\Guard\GuardConfig

Auth\Guard\Config\SessionGuardConfig¶

Class Source on GitHub

Configuration for the Session guard. Holds the names under which the session key and remember-me cookie are stored. Defaults to 'auth' and 'remember'; multi-guard apps can pass a $suffix ('web', 'admin', ...) to derive 'auth_web' / 'remember_web' style names, or override either full name explicitly.

Uses Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue

Method Summary¶

Methods¶

__construct()¶

public function __construct(
    string $suffix = null,
    string $name = null,
    string $rememberName = null
);

getName()¶

public function getName(): string;

getRememberName()¶

public function getRememberName(): string;

Auth\Guard\Config\TokenGuardConfig¶

Class Source on GitHub

This file is part of the Phalcon Framework.

(c) Phalcon Team team@phalcon.io

For the full copyright and license information, please view the LICENSE.txt file that was distributed with this source code.

Implementation of this file has been influenced by sinbadxiii/cphalcon-auth @link https://github.com/sinbadxiii/cphalcon-auth

Uses Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    string $inputKey,
    string $storageKey
);

getInputKey()¶

public function getInputKey(): string;

getStorageKey()¶

public function getStorageKey(): string;

Auth\Guard\GuardLocator¶

Class Source on GitHub

Service locator for Phalcon\Auth guards. Utilizes the container to obtain the service. For Phalcon\Container\Container one can use autowiring; for Phalcon\Di\Di, register the guards in it before resolution.

@extends AbstractLocator

Uses Phalcon\Contracts\Auth\Guard\Guard · Phalcon\Support\AbstractLocator

Method Summary¶

Methods¶

getExceptionClass()¶

protected function getExceptionClass(): string;

getInterfaceClass()¶

protected function getInterfaceClass(): string;

getServices()¶

protected function getServices(): array;

Auth\Guard\Session¶

Class Source on GitHub

@extends AbstractGuard

Uses Phalcon\Auth\Exception · Phalcon\Auth\Exceptions\DoesNotImplement · Phalcon\Auth\Guard\Config\SessionGuardConfig · Phalcon\Auth\Internal\Options · Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Contracts\Auth\Adapter\RememberAdapter · Phalcon\Contracts\Auth\AuthRemember · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Auth\Guard\BasicAuth · Phalcon\Contracts\Auth\Guard\GuardStateful · Phalcon\Contracts\Auth\RememberToken · Phalcon\Contracts\Container\Service\Collection · Phalcon\Di\DiInterface · Phalcon\Http\RequestInterface · Phalcon\Http\Response\CookiesInterface · Phalcon\Session\ManagerInterface · Phalcon\Support\Helper\Json\Encode

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    Adapter $adapter,
    RequestInterface $request,
    CookiesInterface $cookies,
    SessionManagerInterface $session,
    SessionGuardConfig $config = null
);

attempt()¶

public function attempt(
    array $credentials = [],
    bool $remember = false
): bool;

basic()¶

public function basic(
    string $field = "email",
    array $extraConditions = []
): bool;

fromOptions()¶

public static function fromOptions(
    Adapter $adapter,
    mixed $container,
    array $options
): static;

getName()¶

public function getName(): string;

getRememberName()¶

public function getRememberName(): string;

login()¶

public function login(
    AuthUser $user,
    bool $remember = false
): void;

loginById()¶

public function loginById(
    mixed $id,
    bool $remember = false
): false|AuthUser;

logout()¶

public function logout(): void;

once()¶

public function once( array $credentials = [] ): bool;

onceBasic()¶

public function onceBasic(
    string $field = "email",
    array $extraConditions = []
): false|AuthUser;

user()¶

public function user(): AuthUser|null;

validate()¶

public function validate( array $credentials = [] ): bool;

viaRemember()¶

public function viaRemember(): bool;

attemptBasic()¶

protected function attemptBasic(
    string $field,
    array $extraConditions = []
): bool;

basicCredentials()¶

protected function basicCredentials( string $field ): array|null;

createRememberToken()¶

protected function createRememberToken( AuthUser $user ): RememberToken;

recaller()¶

protected function recaller(): UserRemember|null;

rememberUser()¶

protected function rememberUser( AuthUser $user ): void;

userFromRecaller()¶

protected function userFromRecaller( UserRemember $recaller ): AuthUser|null;

Auth\Guard\Token¶

Class Source on GitHub

@extends AbstractGuard

Uses Phalcon\Auth\Guard\Config\TokenGuardConfig · Phalcon\Auth\Internal\Options · Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Container\Service\Collection · Phalcon\Di\DiInterface · Phalcon\Http\RequestInterface

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    Adapter $adapter,
    RequestInterface $request,
    TokenGuardConfig $config
);

fromOptions()¶

public static function fromOptions(
    Adapter $adapter,
    mixed $container,
    array $options
): static;

getTokenForRequest()¶

public function getTokenForRequest(): string|null;

setRequest()¶

public function setRequest( RequestInterface $request ): static;

user()¶

public function user(): AuthUser|null;

validate()¶

public function validate( array $credentials = [] ): bool;

Auth\Guard\UserRemember¶

Final Source on GitHub

Value object representing the contents of a remember-me cookie.

Uses InvalidArgumentException · Phalcon\Support\Helper\Json\Decode

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct( mixed $payload );

Accepts either the raw JSON cookie value (string) or the already decoded associative array. Malformed input degrades to an empty payload so callers can read getters without null-guarding.

getId()¶

public function getId(): int|string|null;

getToken()¶

public function getToken(): string;

getUserAgent()¶

public function getUserAgent(): string;

Auth\Internal\Options¶

Final Source on GitHub

Internal option-parsing helpers shared by adapter / guard fromOptions() implementations. Not part of the public API.

Uses Phalcon\Auth\Exception · Phalcon\Contracts\Container\Service\Collection · Phalcon\Di\DiInterface

Method Summary¶

Methods¶

arrayOption()¶

public static function arrayOption(
    array $options,
    string $key,
    array $defaultValue
): array;

requireString()¶

public static function requireString(
    array $options,
    string $key,
    string $context
): string;

resolveService()¶

public static function resolveService(
    mixed $container,
    string $serviceId,
    string $context
): object;

@template T of object

stringOrNull()¶

public static function stringOrNull(
    array $options,
    string $key
): string|null;

Auth\Manager¶

Class Source on GitHub

Composes guards (authentication) and access gates (authorization) behind a single facade. Guard-specific behavior is reached through Manager::guard(); callers narrow with instanceof against the relevant capability interface (GuardStateful, BasicAuth, etc.).

Uses Phalcon\Auth\Access\AccessLocator · Phalcon\Contracts\Auth\Access\Access · Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Contracts\Auth\AuthUser · Phalcon\Contracts\Auth\Guard\Guard · Phalcon\Contracts\Auth\Guard\GuardStateful · Phalcon\Contracts\Auth\Manager

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct( AccessLocator $accessFactory );

access()¶

public function access( string $accessName ): self;

addAccessList()¶

public function addAccessList( array $accessList ): self;

addGuard()¶

public function addGuard(
    string $nameGuard,
    Guard $guard,
    bool $isDefault = false
): self;

attempt()¶

public function attempt(
    array $credentials = [],
    bool $remember = false
): bool;

check()¶

public function check(): bool;

except()¶

public function except( string $actions ): self;

getAccess()¶

public function getAccess(): Access|null;

getAccessList()¶

public function getAccessList(): array;

getDefaultGuard()¶

public function getDefaultGuard(): Guard|null;

getGuards()¶

public function getGuards(): array;

guard()¶

public function guard( string $name = null ): Guard;

id()¶

public function id(): int|string|null;

logout()¶

public function logout(): void;

only()¶

public function only( string $actions ): self;

setAccess()¶

public function setAccess( Access $access ): self;

setDefaultGuard()¶

public function setDefaultGuard( Guard $guard ): self;

user()¶

public function user(): AuthUser|null;

validate()¶

public function validate( array $credentials = [] ): bool;

Auth\ManagerFactory¶

Class Source on GitHub

Single entry-point factory that builds a fully wired Phalcon\Auth\Manager from a config tree. Framework-shared services (RequestInterface, CookiesInterface, SessionManagerInterface) are resolved from the injected container so the manager wires against the real application singletons, not separately constructed copies.

[ 'guards' => [ 'web' => [ 'type' => 'session', 'default' => true, 'adapter' => [ 'name' => 'model', 'options' => [ 'model' => User::class ], ], 'options' => [], ], 'api' => [ 'type' => 'token', 'adapter' => [ 'name' => 'model', 'options' => [ 'model' => User::class ] ], 'options' => [ 'inputKey' => 'api_token', 'storageKey' => 'api_token' ], ], ], 'access' => [ 'auth' => \Phalcon\Auth\Access\Auth::class, 'guest' => \Phalcon\Auth\Access\Guest::class, ], ]

Uses Phalcon\Auth\Access\AccessLocator · Phalcon\Auth\Adapter\AdapterLocator · Phalcon\Auth\Guard\GuardLocator · Phalcon\Config\ConfigInterface · Phalcon\Contracts\Auth\Access\Access · Phalcon\Contracts\Auth\Adapter\Adapter · Phalcon\Contracts\Auth\Guard\Guard · Phalcon\Contracts\Container\Service\Collection · Phalcon\Di\DiInterface · Phalcon\Encryption\Security

Method Summary¶

Properties¶

Methods¶

__construct()¶

public function __construct(
    Security $hasher,
    mixed $container,
    AdapterLocator $adapterLocator = null,
    GuardLocator $guardLocator = null,
    AccessLocator $accessLocator = null
);

load()¶

public function load( mixed $config ): Manager;

buildAdapter()¶

protected function buildAdapter(
    AdapterLocator $locator,
    array $cfg
): Adapter;

buildGuard()¶

protected function buildGuard(
    GuardLocator $locator,
    string $type,
    Adapter $adapter,
    array $options
): Guard;

Auth\Mvc\AuthDispatcherListener¶

Class Source on GitHub

Listener that enforces the active Phalcon\Auth access gate on each MVC dispatch. Attach to the events manager:

$eventsManager->attach('dispatch', new AuthDispatcherListener($manager));

No-op when no active access has been set on the manager.

Uses Phalcon\Auth\AbstractAuthDispatcherListener · Phalcon\Auth\Exception · Phalcon\Events\Event · Phalcon\Mvc\Dispatcher

Method Summary¶

Methods¶

beforeExecuteRoute()¶

public function beforeExecuteRoute(
    Event $event,
    Dispatcher $dispatcher
): bool;

getActionType()¶

protected function getActionType(): string;