---
title: "Phalcon Auth"
version: "5.20"
---
> Documentation Index
> Fetch the complete documentation index at: https://docs.phalcon.io/llms.txt
> Use this file to discover all available pages before exploring further.
# Phalcon Auth
:::info[NOTE]
All classes are prefixed with `Phalcon`
:::
## Auth\AbstractAuthDispatcherListener
Abstract
Shared enforcement algorithm for the Cli, Mvc and Micro auth listeners.
The subclass provides the action name and context from its event source,
the action-kind label used in the access-denied exception, and (Mvc only)
a forward handler for Access::redirectTo().
Enforcement is fail-open: when the manager has no active access
(Manager::getAccess() === null) every dispatch is allowed. A policy
activated via Manager::access() persists across forwards and nested
dispatches in the same request until it is replaced.
- **`Phalcon\Auth\AbstractAuthDispatcherListener`**
- [`Phalcon\Auth\Cli\AuthDispatcherListener`](#authcliauthdispatcherlistener)
- [`Phalcon\Auth\Micro\AuthMicroListener`](#authmicroauthmicrolistener)
- [`Phalcon\Auth\Mvc\AuthDispatcherListener`](#authmvcauthdispatcherlistener)
`Phalcon\Auth\Exceptions\AccessDenied` · `Phalcon\Contracts\Auth\Access\Access` · `Phalcon\Contracts\Auth\Manager`
### Method Summary
Runs the access check for the given action name. Returns true when
Returns the kind label used by AccessDenied (e.g. 'task', 'action',
### Properties
### Methods
__construct()
```php
public function __construct( Manager $manager );
```
enforce()
```php
protected function enforce(
string $actionName,
array $context = [],
mixed $forwardHandler = null
): bool;
```
Runs the access check for the given action name. Returns true when
the dispatch should proceed, false when a forward was issued, and
throws when access is denied without a redirect target.
The guard is fetched only when an access is active, so the no-op
path works without a default guard.
getActionType()
```php
abstract protected function getActionType(): string;
```
Returns the kind label used by AccessDenied (e.g. 'task', 'action',
'route').
## Auth\Access\AbstractAccess
Abstract
- **`Phalcon\Auth\Access\AbstractAccess`** - implements [`Phalcon\Contracts\Auth\Access\Access`](/5.20/api/phalcon_contracts/#contractsauthaccessaccess)
- [`Phalcon\Auth\Access\Acl`](#authaccessacl)
- [`Phalcon\Auth\Access\Auth`](#authaccessauth)
- [`Phalcon\Auth\Access\Guest`](#authaccessguest)
`Phalcon\Contracts\Auth\Access\Access` · `Phalcon\Contracts\Auth\Guard\Guard`
### Method Summary
Whether the gate's base condition holds for the given identity.
### Properties
### Methods
getExceptActions()
```php
public function getExceptActions(): array;
```
getOnlyActions()
```php
public function getOnlyActions(): array;
```
isAllowed()
```php
public function isAllowed(
Guard $guard,
string $actionName,
array $context = []
): bool;
```
redirectTo()
```php
public function redirectTo(): array|null;
```
setExceptActions()
```php
public function setExceptActions( array $exceptActions = [] ): void;
```
setOnlyActions()
```php
public function setOnlyActions( array $onlyActions = [] ): void;
```
allowedIf()
```php
abstract protected function allowedIf( Guard $guard ): bool;
```
Whether the gate's base condition holds for the given identity.
## Auth\Access\AccessLocator
Class
Service locator for Phalcon\Auth access gates. Utilizes the container to
obtain the service. For the Phalcon\Container\Container one can use
autowiring. For the Phalcon\Di\Di, one needs to register the gates in it
to be used here (the binary gates also resolve unregistered through Di's
class builder).
@extends AbstractLocator<Access>
- [`Phalcon\Support\AbstractLocator`](/5.20/api/phalcon_support/#supportabstractlocator)
- **`Phalcon\Auth\Access\AccessLocator`**
`Phalcon\Auth\Exception` · `Phalcon\Auth\Internal\ContainerResolver` · `Phalcon\Contracts\Auth\Access\Access` · `Phalcon\Support\AbstractLocator`
### Method Summary
Resolve a fresh gate instance from the container.
### Methods
newInstance()
```php
public function newInstance( string $name ): object;
```
Resolve a fresh gate instance from the container.
Gates carry per-activation state (the only/except action filters), so
resolution must yield a fresh instance: new() on the Container
bypasses the instance cache; on the legacy Di, get() builds
unregistered classes and non-shared services fresh, and a shared
service is rebuilt from its definition.
getExceptionClass()
```php
protected function getExceptionClass(): string;
```
getInterfaceClass()
```php
protected function getInterfaceClass(): string;
```
getServices()
```php
protected function getServices(): array;
```
## Auth\Access\Acl
Class
ACL-backed access gate. Checks the authenticated user's role against a
Phalcon\Acl adapter: the ACL component is taken from the 'handler' context
key (prefixed with 'module' and the module separator when present) and the
ACL access is the action name. The 'params' context key is passed through
to the ACL adapter for callable rules.
Filter semantics differ from the binary gates: except = bypass the gate
for the listed actions; only = the gate applies to the listed actions
exclusively (everything else is allowed).
Role resolution: no user resolves to the configured guest role; a user
implementing Phalcon\Acl\RoleAwareInterface supplies its role name; any
other user is rejected with an exception.
- [`Phalcon\Auth\Access\AbstractAccess`](#authaccessabstractaccess)
- **`Phalcon\Auth\Access\Acl`**
`Phalcon\Acl\Adapter\AdapterInterface` · `Phalcon\Acl\RoleAwareInterface` · `Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\DoesNotImplement` · `Phalcon\Auth\Exceptions\MissingHandlerContext` · `Phalcon\Contracts\Auth\Access\Access` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Auth\Guard\Guard`
### Method Summary
Unused: this gate overrides isAllowed() in full. Fail closed to
### Properties
### Methods
__construct()
```php
public function __construct(
AdapterInterface $acl,
array $options = []
);
```
isAllowed()
```php
public function isAllowed(
Guard $guard,
string $actionName,
array $context = []
): bool;
```
allowedIf()
```php
protected function allowedIf( Guard $guard ): bool;
```
Unused: this gate overrides isAllowed() in full. Fail closed to
satisfy the abstract.
resolveRole()
```php
protected function resolveRole( Guard $guard ): string;
```
## Auth\Access\Auth
Class
- [`Phalcon\Auth\Access\AbstractAccess`](#authaccessabstractaccess)
- **`Phalcon\Auth\Access\Auth`**
`Phalcon\Contracts\Auth\Guard\Guard`
### Method Summary
### Methods
allowedIf()
```php
protected function allowedIf( Guard $guard ): bool;
```
## Auth\Access\Guest
Class
- [`Phalcon\Auth\Access\AbstractAccess`](#authaccessabstractaccess)
- **`Phalcon\Auth\Access\Guest`**
`Phalcon\Contracts\Auth\Guard\Guard`
### Method Summary
### Methods
allowedIf()
```php
protected function allowedIf( Guard $guard ): bool;
```
## Auth\Adapter\AbstractAdapter
Abstract
@template TConfig of AdapterConfig
- **`Phalcon\Auth\Adapter\AbstractAdapter`** - implements [`Phalcon\Contracts\Auth\Adapter\Adapter`](/5.20/api/phalcon_contracts/#contractsauthadapteradapter)
- [`Phalcon\Auth\Adapter\AbstractArrayAdapter`](#authadapterabstractarrayadapter)
- [`Phalcon\Auth\Adapter\Model`](#authadaptermodel)
`Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Contracts\Auth\Adapter\AdapterConfig` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Encryption\Security\Security`
### Method Summary
Returns the adapter configuration object.
Returns the model class name, if configured.
Validates the supplied plaintext password against the user's stored hash.
Runs a throwaway password verification against a fixed dummy hash so the
### Constants
Dummy bcrypt hash used to equalize timing on the user-not-found path so
a failed lookup costs the same as a real password check (prevents
login-timing user enumeration).
### Properties
### Methods
__construct()
```php
public function __construct(
Security $hasher,
AdapterConfig $config
);
```
getConfig()
```php
public function getConfig(): AdapterConfig;
```
Returns the adapter configuration object.
getModel()
```php
public function getModel(): string|null;
```
Returns the model class name, if configured.
validateCredentials()
```php
public function validateCredentials(
AuthUser $user,
array $credentials
): bool;
```
Validates the supplied plaintext password against the user's stored hash.
Concrete adapters share this implementation; if your data source needs
a different verification strategy, override it.
burnHash()
```php
protected function burnHash(): void;
```
Runs a throwaway password verification against a fixed dummy hash so the
user-not-found path performs the same hash work as a found path. Call it
when a credential lookup misses to keep response time constant.
## Auth\Adapter\AbstractArrayAdapter
Abstract
Common base for adapters whose user records come from an in-memory list
(Memory and Stream). Subclasses provide the row source via loadUsers();
everything else - credentials matching, hydration, the empty-credentials
guard, and a default linear retrieveById - is shared here.
@template TConfig of AdapterConfig
@extends AbstractAdapter<TConfig>
- [`Phalcon\Auth\Adapter\AbstractAdapter`](#authadapterabstractadapter)
- **`Phalcon\Auth\Adapter\AbstractArrayAdapter`**
- [`Phalcon\Auth\Adapter\Memory`](#authadaptermemory)
- [`Phalcon\Auth\Adapter\Stream`](#authadapterstream)
`Phalcon\Auth\AuthUser` · `Phalcon\Auth\Exceptions\DoesNotImplement` · `Phalcon\Contracts\Auth\Adapter\AdapterConfig` · `Phalcon\Contracts\Auth\AuthUser`
### Method Summary
Walks the user list and returns the first row whose non-'password'
Default linear-scan implementation. Memory overrides this for an O(1)
Tests whether a credentials payload carries at least one identifying
Hydrates a raw user row into either the configured model class or a
Returns the source list of user rows. Concrete subclasses decide
Per-key match of a row against credentials, skipping 'password'. Values
### Methods
retrieveByCredentials()
```php
public function retrieveByCredentials( array $credentials ): AuthUserContract|null;
```
Walks the user list and returns the first row whose non-'password'
keys all match strictly. Returns null when no row matches or when
$credentials carries no identifying field at all (only 'password',
or empty) - protects callers from the silent "first row wins" footgun.
retrieveById()
```php
public function retrieveById( mixed $id ): AuthUserContract|null;
```
Default linear-scan implementation. Memory overrides this for an O(1)
id-keyed lookup; Stream uses this as-is.
hasIdentifyingField()
```php
protected function hasIdentifyingField( array $credentials ): bool;
```
Tests whether a credentials payload carries at least one identifying
field (i.e. anything other than 'password'). An empty payload - or a
payload that only contains 'password' - is treated as "no lookup".
hydrate()
```php
protected function hydrate( array $row ): AuthUserContract;
```
Hydrates a raw user row into either the configured model class or a
Phalcon\Auth\AuthUser value object.
loadUsers()
```php
abstract protected function loadUsers(): array;
```
Returns the source list of user rows. Concrete subclasses decide
where they come from (config array, JSON file, etc.).
matchesRow()
```php
protected function matchesRow(
array $row,
array $credentials
): bool;
```
Per-key match of a row against credentials, skipping 'password'. Values
are compared as strings so typed row values (e.g. int id, bool active)
match the string input that arrives from an HTTP request.
## Auth\Adapter\AdapterLocator
Class
Service locator for Phalcon\Auth adapters. Utilizes the container to
obtain the service. For the Phalcon\Container\Container one can use
autowiring. For the Phalcon\Di\Di, one needs to register the gates in it
to be used here.
@extends AbstractLocator<Adapter>
- [`Phalcon\Support\AbstractLocator`](/5.20/api/phalcon_support/#supportabstractlocator)
- **`Phalcon\Auth\Adapter\AdapterLocator`**
`Phalcon\Auth\Exception` · `Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Support\AbstractLocator`
### Method Summary
### Methods
getExceptionClass()
```php
protected function getExceptionClass(): string;
```
getInterfaceClass()
```php
protected function getInterfaceClass(): string;
```
getServices()
```php
protected function getServices(): array;
```
## Auth\Adapter\Config\AbstractAdapterConfig
Abstract
@todo Remove in v7. Kept only for backwards compatibility; compose
Phalcon\Auth\Adapter\Config\Traits\ModelConfigTrait directly instead of
extending this.
- **`Phalcon\Auth\Adapter\Config\AbstractAdapterConfig`** - implements [`Phalcon\Contracts\Auth\Adapter\AdapterConfig`](/5.20/api/phalcon_contracts/#contractsauthadapteradapterconfig)
- [`Phalcon\Auth\Adapter\Config\MemoryAdapterConfig`](#authadapterconfigmemoryadapterconfig)
- [`Phalcon\Auth\Adapter\Config\ModelAdapterConfig`](#authadapterconfigmodeladapterconfig)
- [`Phalcon\Auth\Adapter\Config\StreamAdapterConfig`](#authadapterconfigstreamadapterconfig)
`Phalcon\Auth\Adapter\Config\Traits\ModelConfigTrait` · `Phalcon\Contracts\Auth\Adapter\AdapterConfig`
### Method Summary
### Methods
__construct()
```php
public function __construct( string|null $model = null );
```
## Auth\Adapter\Config\MemoryAdapterConfig
Class
- [`Phalcon\Auth\Adapter\Config\AbstractAdapterConfig`](#authadapterconfigabstractadapterconfig)
- **`Phalcon\Auth\Adapter\Config\MemoryAdapterConfig`**
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
array $users = [],
string|null $model = null
);
```
getUsers()
```php
public function getUsers(): array;
```
## Auth\Adapter\Config\ModelAdapterConfig
Class
- [`Phalcon\Auth\Adapter\Config\AbstractAdapterConfig`](#authadapterconfigabstractadapterconfig)
- **`Phalcon\Auth\Adapter\Config\ModelAdapterConfig`**
`Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
string $model,
string $idColumn = "id"
);
```
getIdColumn()
```php
public function getIdColumn(): string;
```
getModel()
```php
public function getModel(): string;
```
## Auth\Adapter\Config\StreamAdapterConfig
Class
- [`Phalcon\Auth\Adapter\Config\AbstractAdapterConfig`](#authadapterconfigabstractadapterconfig)
- **`Phalcon\Auth\Adapter\Config\StreamAdapterConfig`**
`Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
string $file,
string|null $model = null
);
```
getFile()
```php
public function getFile(): string;
```
## Auth\Adapter\Config\Traits\ModelConfigTrait
Trait
Shared model-name state and accessor for auth adapter configurations.
- **`Phalcon\Auth\Adapter\Config\Traits\ModelConfigTrait`**
[`Phalcon\Auth\Adapter\Config\AbstractAdapterConfig`](#authadapterconfigabstractadapterconfig)
### Method Summary
### Properties
### Methods
getModel()
```php
public function getModel(): string|null;
```
## Auth\Adapter\Memory
Class
In-memory adapter - useful for tests and small read-only user lists.
@extends AbstractArrayAdapter<MemoryAdapterConfig>
- [`Phalcon\Auth\Adapter\AbstractAdapter`](#authadapterabstractadapter)
- [`Phalcon\Auth\Adapter\AbstractArrayAdapter`](#authadapterabstractarrayadapter)
- **`Phalcon\Auth\Adapter\Memory`**
`Phalcon\Auth\Adapter\Config\MemoryAdapterConfig` · `Phalcon\Auth\Internal\Options` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Encryption\Security\Security`
### Method Summary
Overridden for O(1) lookup via the id index built in the constructor.
### Methods
__construct()
```php
public function __construct(
Security $hasher,
MemoryAdapterConfig $config
);
```
fromOptions()
```php
public static function fromOptions(
Security $hasher,
array $options
): static;
```
retrieveById()
```php
public function retrieveById( mixed $id ): AuthUser|null;
```
Overridden for O(1) lookup via the id index built in the constructor.
loadUsers()
```php
protected function loadUsers(): array;
```
## Auth\Adapter\Model
Class
Phalcon Model-backed adapter.
@extends AbstractAdapter<ModelAdapterConfig>
- [`Phalcon\Auth\Adapter\AbstractAdapter`](#authadapterabstractadapter)
- **`Phalcon\Auth\Adapter\Model`** - implements [`Phalcon\Contracts\Auth\Adapter\RememberAdapter`](/5.20/api/phalcon_contracts/#contractsauthadapterrememberadapter)
`Phalcon\Auth\Adapter\Config\ModelAdapterConfig` · `Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\DoesNotImplement` · `Phalcon\Auth\Exceptions\InvalidCredentialKey` · `Phalcon\Auth\Internal\Options` · `Phalcon\Contracts\Auth\Adapter\RememberAdapter` · `Phalcon\Contracts\Auth\AuthRemember` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Auth\RememberToken` · `Phalcon\Contracts\Encryption\Security\Security` · `Phalcon\Mvc\ModelInterface`
### Method Summary
Create and persist a new remember token for the user.
Find a user matching the given credentials (excluding 'password' key).
Retrieve a user by the remember-me cookie payload.
### Methods
__construct()
```php
public function __construct(
Security $hasher,
ModelAdapterConfig $config
);
```
createRememberToken()
```php
public function createRememberToken( AuthUser $user ): RememberToken;
```
Create and persist a new remember token for the user.
fromOptions()
```php
public static function fromOptions(
Security $hasher,
array $options
): static;
```
retrieveByCredentials()
```php
public function retrieveByCredentials( array $credentials ): AuthUser|null;
```
Find a user matching the given credentials (excluding 'password' key).
retrieveById()
```php
public function retrieveById( mixed $id ): AuthUser|null;
```
retrieveByToken()
```php
public function retrieveByToken(
mixed $id,
string $token,
string|null $userAgent = null
): AuthUser|null;
```
Retrieve a user by the remember-me cookie payload.
## Auth\Adapter\Stream
Class
JSON file-backed adapter.
The file must contain a JSON array of user records:
[\{"id":1,"email":"a@b","password":"<hashed>"\}, ...]
@extends AbstractArrayAdapter<StreamAdapterConfig>
- [`Phalcon\Auth\Adapter\AbstractAdapter`](#authadapterabstractadapter)
- [`Phalcon\Auth\Adapter\AbstractArrayAdapter`](#authadapterabstractarrayadapter)
- **`Phalcon\Auth\Adapter\Stream`**
`InvalidArgumentException` · `Phalcon\Auth\Adapter\Config\StreamAdapterConfig` · `Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\FileCannotRead` · `Phalcon\Auth\Exceptions\FileDoesNotContainJson` · `Phalcon\Auth\Exceptions\FileDoesNotExist` · `Phalcon\Auth\Exceptions\FileNotValidJson` · `Phalcon\Auth\Internal\Options` · `Phalcon\Contracts\Encryption\Security\Security` · `Phalcon\Support\Helper\Json\Decode` · `Phalcon\Traits\Php\FileTrait`
### Method Summary
Loads and decodes the JSON users file. Re-read on every call - if you
### Methods
__construct()
```php
public function __construct(
Security $hasher,
StreamAdapterConfig $config
);
```
fromOptions()
```php
public static function fromOptions(
Security $hasher,
array $options
): static;
```
loadUsers()
```php
protected function loadUsers(): array;
```
Loads and decodes the JSON users file. Re-read on every call - if you
need caching, wrap it.
## Auth\AuthUser
Class
Lightweight value object returned by array-backed adapters (Memory, Stream)
when no application model class is configured.
- **`Phalcon\Auth\AuthUser`** - implements [`Phalcon\Contracts\Auth\AuthUser`](/5.20/api/phalcon_contracts/#contractsauthauthuser)
`Phalcon\Auth\Exceptions\DataMustContainIdKey` · `Phalcon\Contracts\Auth\AuthUser`
### Method Summary
Returns the underlying data array.
### Properties
### Methods
__construct()
```php
public function __construct( array $data );
```
getAuthIdentifier()
```php
public function getAuthIdentifier(): int|string;
```
getAuthPassword()
```php
public function getAuthPassword(): string;
```
toArray()
```php
public function toArray(): array;
```
Returns the underlying data array.
## Auth\Cli\AuthDispatcherListener
Class
- [`Phalcon\Auth\AbstractAuthDispatcherListener`](#authabstractauthdispatcherlistener)
- **`Phalcon\Auth\Cli\AuthDispatcherListener`**
`Phalcon\Auth\AbstractAuthDispatcherListener` · `Phalcon\Auth\Exception` · `Phalcon\Cli\Dispatcher` · `Phalcon\Events\Event`
### Method Summary
### Methods
beforeExecuteRoute()
```php
public function beforeExecuteRoute(
Event $event,
Dispatcher $dispatcher
): bool;
```
getActionType()
```php
protected function getActionType(): string;
```
## Auth\Exception
Class
Exceptions thrown in Phalcon\Auth will use this class
- `\Exception`
- **`Phalcon\Auth\Exception`**
- [`Phalcon\Auth\Exceptions\AccessDenied`](#authexceptionsaccessdenied)
- [`Phalcon\Auth\Exceptions\AccessNotRegistered`](#authexceptionsaccessnotregistered)
- [`Phalcon\Auth\Exceptions\ActiveAccessRequired`](#authexceptionsactiveaccessrequired)
- [`Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue`](#authexceptionsconfigrequiresnonemptyvalue)
- [`Phalcon\Auth\Exceptions\DataMustContainIdKey`](#authexceptionsdatamustcontainidkey)
- [`Phalcon\Auth\Exceptions\DefaultGuardNotRegistered`](#authexceptionsdefaultguardnotregistered)
- [`Phalcon\Auth\Exceptions\DoesNotImplement`](#authexceptionsdoesnotimplement)
- [`Phalcon\Auth\Exceptions\FileCannotRead`](#authexceptionsfilecannotread)
- [`Phalcon\Auth\Exceptions\FileDoesNotContainJson`](#authexceptionsfiledoesnotcontainjson)
- [`Phalcon\Auth\Exceptions\FileDoesNotExist`](#authexceptionsfiledoesnotexist)
- [`Phalcon\Auth\Exceptions\FileNotValidJson`](#authexceptionsfilenotvalidjson)
- [`Phalcon\Auth\Exceptions\GuardNotDefined`](#authexceptionsguardnotdefined)
- [`Phalcon\Auth\Exceptions\InvalidCredentialKey`](#authexceptionsinvalidcredentialkey)
- [`Phalcon\Auth\Exceptions\MissingHandlerContext`](#authexceptionsmissinghandlercontext)
- [`Phalcon\Auth\Exceptions\OptionRequiresArray`](#authexceptionsoptionrequiresarray)
- [`Phalcon\Auth\Exceptions\OptionRequiresString`](#authexceptionsoptionrequiresstring)
- [`Phalcon\Auth\Exceptions\SessionNamesMustDiffer`](#authexceptionssessionnamesmustdiffer)
- [`Phalcon\Auth\Exceptions\UnknownAdapter`](#authexceptionsunknownadapter)
- [`Phalcon\Auth\Exceptions\UnknownGuard`](#authexceptionsunknownguard)
## Auth\Exceptions\AccessDenied
Class
Access denied exception
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\AccessDenied`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct(
string $type,
string $name
);
```
## Auth\Exceptions\AccessNotRegistered
Class
Access gate name is not registered
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\AccessNotRegistered`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $name );
```
## Auth\Exceptions\ActiveAccessRequired
Class
No active access has been set on the manager
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\ActiveAccessRequired`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct();
```
## Auth\Exceptions\ConfigRequiresNonEmptyValue
Class
Config requires non-empty value
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue`**
`Phalcon\Auth\Exception`
### Method Summary
Throws when the value is an empty string. A null value is treated as
### Methods
__construct()
```php
public function __construct(
string $configName,
string $configKey,
string $suffix = ""
);
```
assert()
```php
public static function assert(
mixed $value,
string $configName,
string $configKey,
string $suffix = ""
): void;
```
Throws when the value is an empty string. A null value is treated as
"not provided" and passes, so optional settings can reuse the same
guard; callers that require presence reject null earlier. Keeps the
empty-value check shared by every config class in one place.
## Auth\Exceptions\DataMustContainIdKey
Class
AuthUser data must contain "id"
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\DataMustContainIdKey`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct();
```
## Auth\Exceptions\DefaultGuardNotRegistered
Class
No default guard registered
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\DefaultGuardNotRegistered`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct();
```
## Auth\Exceptions\DoesNotImplement
Class
Does not implement interface
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\DoesNotImplement`**
`Phalcon\Auth\Exception`
### Method Summary
Throws when value is not an instance of the given interface. Keeps the
### Methods
__construct()
```php
public function __construct(
string $type,
string $name
);
```
assert()
```php
public static function assert(
mixed $value,
string $interfaceName,
string $type,
string $name
): void;
```
Throws when value is not an instance of the given interface. Keeps the
"must implement" guard shared across adapters, guards and the manager
in one place.
## Auth\Exceptions\FileCannotRead
Class
Cannot read file
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\FileCannotRead`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $path );
```
## Auth\Exceptions\FileDoesNotContainJson
Class
File does not contain a JSON array
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\FileDoesNotContainJson`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $path );
```
## Auth\Exceptions\FileDoesNotExist
Class
File does not exist
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\FileDoesNotExist`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $path );
```
## Auth\Exceptions\FileNotValidJson
Class
Not a valid JSON
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\FileNotValidJson`**
`Phalcon\Auth\Exception` · `Throwable`
### Method Summary
### Methods
__construct()
```php
public function __construct(
string $path,
Throwable $ex
);
```
## Auth\Exceptions\GuardNotDefined
Class
Guard name is not defined on the manager
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\GuardNotDefined`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $name );
```
## Auth\Exceptions\InvalidCredentialKey
Class
A credential key is not a plain identifier and cannot be used as a query
column
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\InvalidCredentialKey`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $key );
```
## Auth\Exceptions\MissingHandlerContext
Class
The Acl access gate is missing the required 'handler' context key
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\MissingHandlerContext`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct();
```
## Auth\Exceptions\OptionRequiresArray
Class
Option must be a non-empty array
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\OptionRequiresArray`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct(
string $context,
string $key
);
```
## Auth\Exceptions\OptionRequiresString
Class
Option must be a non-empty string
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\OptionRequiresString`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct(
string $context,
string $key
);
```
## Auth\Exceptions\SessionNamesMustDiffer
Class
Session guard 'name' and 'rememberName' must differ
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\SessionNamesMustDiffer`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct();
```
## Auth\Exceptions\UnknownAdapter
Class
Unknown auth adapter requested from the factory
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\UnknownAdapter`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $name );
```
## Auth\Exceptions\UnknownGuard
Class
Unknown auth guard type requested from the factory
- `\Exception`
- [`Phalcon\Auth\Exception`](#authexception)
- **`Phalcon\Auth\Exceptions\UnknownGuard`**
`Phalcon\Auth\Exception`
### Method Summary
### Methods
__construct()
```php
public function __construct( string $type );
```
## Auth\Guard\AbstractGuard
Abstract
@template TConfig of GuardConfig
- **`Phalcon\Auth\Guard\AbstractGuard`** - implements [`Phalcon\Contracts\Auth\Guard\Guard`](/5.20/api/phalcon_contracts/#contractsauthguardguard)
- [`Phalcon\Auth\Guard\Session`](#authguardsession)
- [`Phalcon\Auth\Guard\Token`](#authguardtoken)
`Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Auth\Guard\Guard` · `Phalcon\Contracts\Auth\Guard\GuardConfig` · `Phalcon\Events\ManagerInterface` · `Phalcon\Events\Traits\EventsAwareTrait`
### Method Summary
Returns the guard configuration object.
user should be ?AuthUser
### Properties
### Methods
__construct()
```php
public function __construct(
Adapter $adapter,
GuardConfig $config
);
```
check()
```php
public function check(): bool;
```
getAdapter()
```php
public function getAdapter(): Adapter;
```
getConfig()
```php
public function getConfig(): GuardConfig;
```
Returns the guard configuration object.
getLastUserAttempted()
```php
public function getLastUserAttempted(): AuthUser|null;
```
guest()
```php
public function guest(): bool;
```
hasUser()
```php
public function hasUser(): bool;
```
id()
```php
public function id(): int|string|null;
```
setAdapter()
```php
public function setAdapter( Adapter $adapter ): static;
```
setUser()
```php
public function setUser( AuthUser $user ): static;
```
hasValidCredentials()
```php
protected function hasValidCredentials(
mixed $user,
array $credentials
): bool;
```
user should be ?AuthUser
## Auth\Guard\Config\AbstractGuardConfig
Abstract
- **`Phalcon\Auth\Guard\Config\AbstractGuardConfig`** - implements [`Phalcon\Contracts\Auth\Guard\GuardConfig`](/5.20/api/phalcon_contracts/#contractsauthguardguardconfig)
- [`Phalcon\Auth\Guard\Config\SessionGuardConfig`](#authguardconfigsessionguardconfig)
- [`Phalcon\Auth\Guard\Config\TokenGuardConfig`](#authguardconfigtokenguardconfig)
`Phalcon\Contracts\Auth\Guard\GuardConfig`
## Auth\Guard\Config\SessionGuardConfig
Class
Configuration for the Session guard. Holds the names under which the
session key and remember-me cookie are stored. Defaults to 'auth' and
'remember'; multi-guard apps can pass a $suffix ('web', 'admin', ...)
to derive 'auth_web' / 'remember_web' style names, or override either
full name explicitly.
- [`Phalcon\Auth\Guard\Config\AbstractGuardConfig`](#authguardconfigabstractguardconfig)
- **`Phalcon\Auth\Guard\Config\SessionGuardConfig`**
`Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue` · `Phalcon\Auth\Exceptions\SessionNamesMustDiffer`
### Method Summary
Whether the remember-me cookie carries the Secure flag. Defaults to
### Constants
Default remember-me cookie lifetime, in seconds (365 days).
### Methods
__construct()
```php
public function __construct(
string|null $suffix = null,
string|null $name = null,
string|null $rememberName = null,
int|null $rememberTtl = null,
bool $rememberSecure = true
);
```
getName()
```php
public function getName(): string;
```
getRememberName()
```php
public function getRememberName(): string;
```
getRememberSecure()
```php
public function getRememberSecure(): bool;
```
Whether the remember-me cookie carries the Secure flag. Defaults to
true: the cookie is a bearer credential. Set it to false only for a
deployment that serves plain HTTP on purpose.
getRememberTtl()
```php
public function getRememberTtl(): int;
```
## Auth\Guard\Config\TokenGuardConfig
Class
- [`Phalcon\Auth\Guard\Config\AbstractGuardConfig`](#authguardconfigabstractguardconfig)
- **`Phalcon\Auth\Guard\Config\TokenGuardConfig`**
`Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\ConfigRequiresNonEmptyValue`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
string $inputKey,
string $storageKey
);
```
```php
public function getInputKey(): string;
```
getStorageKey()
```php
public function getStorageKey(): string;
```
## Auth\Guard\GuardLocator
Class
Service locator for Phalcon\Auth guards. Utilizes the container to obtain
the service. For Phalcon\Container\Container one can use autowiring; for
Phalcon\Di\Di, register the guards in it before resolution.
@extends AbstractLocator<Guard>
- [`Phalcon\Support\AbstractLocator`](/5.20/api/phalcon_support/#supportabstractlocator)
- **`Phalcon\Auth\Guard\GuardLocator`**
`Phalcon\Auth\Exception` · `Phalcon\Contracts\Auth\Guard\Guard` · `Phalcon\Support\AbstractLocator`
### Method Summary
### Methods
getExceptionClass()
```php
protected function getExceptionClass(): string;
```
getInterfaceClass()
```php
protected function getInterfaceClass(): string;
```
getServices()
```php
protected function getServices(): array;
```
## Auth\Guard\Session
Class
@extends AbstractGuard<SessionGuardConfig>
- [`Phalcon\Auth\Guard\AbstractGuard`](#authguardabstractguard)
- **`Phalcon\Auth\Guard\Session`** - implements [`Phalcon\Contracts\Auth\Guard\GuardStateful`](/5.20/api/phalcon_contracts/#contractsauthguardguardstateful), [`Phalcon\Contracts\Auth\Guard\BasicAuth`](/5.20/api/phalcon_contracts/#contractsauthguardbasicauth)
`Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\DoesNotImplement` · `Phalcon\Auth\Guard\Config\SessionGuardConfig` · `Phalcon\Auth\Internal\ContainerResolver` · `Phalcon\Auth\Internal\Options` · `Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Contracts\Auth\Adapter\RememberAdapter` · `Phalcon\Contracts\Auth\AuthRemember` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Auth\Guard\BasicAuth` · `Phalcon\Contracts\Auth\Guard\GuardStateful` · `Phalcon\Contracts\Auth\RememberToken` · `Phalcon\Http\RequestInterface` · `Phalcon\Http\Response\CookiesInterface` · `Phalcon\Session\ManagerInterface` · `Phalcon\Support\Helper\Json\Encode` · `Phalcon\Time\Clock\ClockInterface` · `Phalcon\Time\Clock\SystemClock`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
Adapter $adapter,
RequestInterface $request,
CookiesInterface $cookies,
SessionManagerInterface $session,
SessionGuardConfig|null $config = null,
ClockInterface|null $clock = null
);
```
attempt()
```php
public function attempt(
array $credentials = [],
bool $remember = false
): bool;
```
basic()
```php
public function basic(
string $field = "email",
array $extraConditions = []
): bool;
```
fromOptions()
```php
public static function fromOptions(
Adapter $adapter,
mixed $container,
array $options
): static;
```
getName()
```php
public function getName(): string;
```
getRememberName()
```php
public function getRememberName(): string;
```
login()
```php
public function login(
AuthUser $user,
bool $remember = false
): void;
```
loginById()
```php
public function loginById(
mixed $id,
bool $remember = false
): AuthUser|false;
```
logout()
```php
public function logout(): void;
```
once()
```php
public function once( array $credentials = [] ): bool;
```
onceBasic()
```php
public function onceBasic(
string $field = "email",
array $extraConditions = []
): AuthUser|false;
```
user()
```php
public function user(): AuthUser|null;
```
validate()
```php
public function validate( array $credentials = [] ): bool;
```
viaRemember()
```php
public function viaRemember(): bool;
```
attemptBasic()
```php
protected function attemptBasic(
string $field,
array $extraConditions = []
): bool;
```
basicCredentials()
```php
protected function basicCredentials( string $field ): array|null;
```
createRememberToken()
```php
protected function createRememberToken( AuthUser $user ): RememberToken;
```
recaller()
```php
protected function recaller(): UserRemember|null;
```
rememberUser()
```php
protected function rememberUser( AuthUser $user ): void;
```
userFromRecaller()
```php
protected function userFromRecaller( UserRemember $recaller ): AuthUser|null;
```
## Auth\Guard\Token
Class
@extends AbstractGuard<TokenGuardConfig>
- [`Phalcon\Auth\Guard\AbstractGuard`](#authguardabstractguard)
- **`Phalcon\Auth\Guard\Token`**
`Phalcon\Auth\Guard\Config\TokenGuardConfig` · `Phalcon\Auth\Internal\ContainerResolver` · `Phalcon\Auth\Internal\Options` · `Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Http\RequestInterface`
### Method Summary
Returns the bearer token for the request.
### Properties
### Methods
__construct()
```php
public function __construct(
Adapter $adapter,
RequestInterface $request,
TokenGuardConfig $config
);
```
fromOptions()
```php
public static function fromOptions(
Adapter $adapter,
mixed $container,
array $options
): static;
```
getTokenForRequest()
```php
public function getTokenForRequest(): string|null;
```
Returns the bearer token for the request.
Security: for backward compatibility the configured input key is also
read from the query string / request body, and is checked before the
Authorization header. A token placed in a URL leaks through access logs,
browser history and the Referer header (CWE-598) - always send it in the
"Authorization: Bearer <token>" header and never as a query parameter.
A header-only opt-in is planned for a future major version.
setRequest()
```php
public function setRequest( RequestInterface $request ): static;
```
user()
```php
public function user(): AuthUser|null;
```
validate()
```php
public function validate( array $credentials = [] ): bool;
```
## Auth\Guard\UserRemember
Final
Value object representing the contents of a remember-me cookie.
- **`Phalcon\Auth\Guard\UserRemember`**
`InvalidArgumentException` · `Phalcon\Support\Helper\Json\Decode`
### Method Summary
Accepts either the raw JSON cookie value (string) or the already
### Properties
### Methods
__construct()
```php
public function __construct( mixed $payload );
```
Accepts either the raw JSON cookie value (string) or the already
decoded associative array. Malformed input degrades to an empty
payload so callers can read getters without null-guarding.
getId()
```php
public function getId(): int|string|null;
```
getToken()
```php
public function getToken(): string;
```
getUserAgent()
```php
public function getUserAgent(): string;
```
## Auth\Internal\ContainerResolver
Final
Internal single source of truth for resolving services from either the
new Phalcon\Container\Container or the legacy Phalcon\Di\Di. Not part of
the public API.
Intent is Container-first; the legacy Di is supported "with provisions":
definitions must be pre-registered (no autowiring), the one exception
being the fresh path, which lets Di build an unregistered but existing
class via its class builder.
All legacy-Di failures are normalized to Phalcon\Container\Exceptions so
callers and userland catch a single exception family.
- **`Phalcon\Auth\Internal\ContainerResolver`**
`Closure` · `Phalcon\Container\Exceptions\Exception` · `Phalcon\Contracts\Container\Service\Collection` · `Phalcon\Di\DiInterface` · `Phalcon\Di\Exception` · `Phalcon\Di\Service` · `TypeError`
### Method Summary
Validates that the value is a supported container.
Resolves the first candidate service name that the container can
Convenience composition of serviceCandidates() + requireService():
Resolves a fresh instance: new() on the Container (bypasses the
Builds the ordered candidate list for a framework service:
### Methods
ensureContainer()
```php
public static function ensureContainer( mixed $container ): void;
```
Validates that the value is a supported container.
requireService()
```php
public static function requireService(
mixed $container,
array $candidates,
string $context
): object;
```
Resolves the first candidate service name that the container can
provide, as a shared instance. Used for framework services (request,
cookies, session) whose container key may vary between application
setups.
resolveCandidate()
```php
public static function resolveCandidate(
mixed $container,
array $options,
string $key,
string $fqn,
string $shortName,
string $context
): object;
```
Convenience composition of serviceCandidates() + requireService():
resolves the first bound candidate for a framework service whose
container key may vary, using the options override or the
[interface FQN, conventional short name] fallback.
resolveFresh()
```php
public static function resolveFresh(
mixed $container,
string $name
): object;
```
Resolves a fresh instance: new() on the Container (bypasses the
instance cache); on the legacy Di, get() for unregistered or
non-shared services, and a rebuild from the definition for shared
services (Di::get() would return the cached instance). On Di, an
unregistered but existing class is still built via the class builder.
serviceCandidates()
```php
public static function serviceCandidates(
array $options,
string $key,
string $fqn,
string $shortName
): array;
```
Builds the ordered candidate list for a framework service:
an explicit override from options['services'][key] if present,
otherwise the interface FQN followed by the conventional short name.
## Auth\Internal\Options
Final
Internal option-parsing helpers shared by adapter / guard fromOptions()
implementations. Not part of the public API.
- **`Phalcon\Auth\Internal\Options`**
`Phalcon\Auth\Exception` · `Phalcon\Auth\Exceptions\OptionRequiresArray` · `Phalcon\Auth\Exceptions\OptionRequiresString`
### Method Summary
### Methods
arrayOption()
```php
public static function arrayOption(
array $options,
string $key,
array $defaultValue
): array;
```
requireArray()
```php
public static function requireArray(
array $options,
string $key,
string $context
): array;
```
requireString()
```php
public static function requireString(
array $options,
string $key,
string $context
): string;
```
stringOrNull()
```php
public static function stringOrNull(
array $options,
string $key
): string|null;
```
## Auth\Manager
Class
Composes guards (authentication) and access gates (authorization)
behind a single facade. Guard-specific behavior is reached through
Manager::guard(); callers narrow with instanceof against the
relevant capability interface (GuardStateful, BasicAuth, etc.).
- **`Phalcon\Auth\Manager`** - implements [`Phalcon\Contracts\Auth\Manager`](/5.20/api/phalcon_contracts/#contractsauthmanager)
`Phalcon\Auth\Access\AccessLocator` · `Phalcon\Auth\Exceptions\AccessNotRegistered` · `Phalcon\Auth\Exceptions\ActiveAccessRequired` · `Phalcon\Auth\Exceptions\DefaultGuardNotRegistered` · `Phalcon\Auth\Exceptions\DoesNotImplement` · `Phalcon\Auth\Exceptions\GuardNotDefined` · `Phalcon\Contracts\Auth\Access\Access` · `Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Contracts\Auth\AuthUser` · `Phalcon\Contracts\Auth\Guard\Guard` · `Phalcon\Contracts\Auth\Guard\GuardStateful` · `Phalcon\Contracts\Auth\Manager`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct( AccessLocator $accessFactory );
```
access()
```php
public function access( string $accessName ): self;
```
addAccessList()
```php
public function addAccessList( array $accessList ): self;
```
addGuard()
```php
public function addGuard(
string $nameGuard,
Guard $guard,
bool $isDefault = false
): self;
```
attempt()
```php
public function attempt(
array $credentials = [],
bool $remember = false
): bool;
```
check()
```php
public function check(): bool;
```
except()
```php
public function except( string $actions ): self;
```
getAccess()
```php
public function getAccess(): Access|null;
```
getAccessList()
```php
public function getAccessList(): array;
```
getDefaultGuard()
```php
public function getDefaultGuard(): Guard|null;
```
getGuards()
```php
public function getGuards(): array;
```
guard()
```php
public function guard( string|null $name = null ): Guard;
```
id()
```php
public function id(): int|string|null;
```
logout()
```php
public function logout(): void;
```
only()
```php
public function only( string $actions ): self;
```
setAccess()
```php
public function setAccess( Access $access ): self;
```
setDefaultGuard()
```php
public function setDefaultGuard( Guard $guard ): self;
```
user()
```php
public function user(): AuthUser|null;
```
validate()
```php
public function validate( array $credentials = [] ): bool;
```
## Auth\ManagerFactory
Class
Single entry-point factory that builds a fully wired Phalcon\Auth\Manager
from a config tree. Framework-shared services (RequestInterface,
CookiesInterface, SessionManagerInterface) are resolved from the injected
container so the manager wires against the real application singletons,
not separately constructed copies.
[
'guards' => [
'web' => [
'type' => 'session',
'default' => true,
'adapter' => [
'name' => 'model',
'options' => [
'model' => User::class
],
],
'options' => [],
],
'api' => [
'type' => 'token',
'adapter' => [
'name' => 'model',
'options' => [
'model' => User::class
]
],
'options' => [
'inputKey' => 'api_token',
'storageKey' => 'api_token'
],
],
],
'access' => [
'auth' => \Phalcon\Auth\Access\Auth::class,
'guest' => \Phalcon\Auth\Access\Guest::class,
],
]
- **`Phalcon\Auth\ManagerFactory`**
`Phalcon\Auth\Access\AccessLocator` · `Phalcon\Auth\Adapter\AdapterLocator` · `Phalcon\Auth\Exceptions\UnknownAdapter` · `Phalcon\Auth\Exceptions\UnknownGuard` · `Phalcon\Auth\Guard\GuardLocator` · `Phalcon\Auth\Internal\Options` · `Phalcon\Config\ConfigInterface` · `Phalcon\Contracts\Auth\Access\Access` · `Phalcon\Contracts\Auth\Adapter\Adapter` · `Phalcon\Contracts\Auth\Guard\Guard` · `Phalcon\Contracts\Container\Service\Collection` · `Phalcon\Di\DiInterface` · `Phalcon\Encryption\Security` · `Phalcon\Traits\Factory\ConfigTrait`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
Security $hasher,
mixed $container,
AdapterLocator|null $adapterLocator = null,
GuardLocator|null $guardLocator = null,
AccessLocator|null $accessLocator = null
);
```
load()
```php
public function load( mixed $config ): Manager;
```
buildAdapter()
```php
protected function buildAdapter(
AdapterLocator $locator,
array $cfg
): Adapter;
```
buildGuard()
```php
protected function buildGuard(
GuardLocator $locator,
string $type,
Adapter $adapter,
array $options
): Guard;
```
getExceptionClass()
```php
protected function getExceptionClass(): string;
```
## Auth\Micro\AuthMicroListener
Class
Listener that enforces the active Phalcon\Auth access gate on each Micro
route execution. Attach to the events manager:
$eventsManager->attach('micro', new AuthMicroListener($manager));
$app->setEventsManager($eventsManager);
The action name is the matched route's name, falling back to the route
pattern when the route is unnamed. The ACL component is the configured
component name (default 'Micro'). redirectTo() is ignored - Micro has no
forward mechanism.
No-op when no active access has been set on the manager.
- [`Phalcon\Auth\AbstractAuthDispatcherListener`](#authabstractauthdispatcherlistener)
- **`Phalcon\Auth\Micro\AuthMicroListener`**
`Phalcon\Auth\AbstractAuthDispatcherListener` · `Phalcon\Auth\Exception` · `Phalcon\Contracts\Auth\Manager` · `Phalcon\Events\Event` · `Phalcon\Mvc\Micro` · `Phalcon\Mvc\RouterInterface` · `Phalcon\Mvc\Router\RouteInterface`
### Method Summary
### Properties
### Methods
__construct()
```php
public function __construct(
Manager $manager,
string $componentName = "Micro"
);
```
beforeExecuteRoute()
```php
public function beforeExecuteRoute(
Event $event,
Micro $application
): bool;
```
getActionType()
```php
protected function getActionType(): string;
```
## Auth\Mvc\AuthDispatcherListener
Class
Listener that enforces the active Phalcon\Auth access gate on each MVC
dispatch. Attach to the events manager:
$eventsManager->attach('dispatch', new AuthDispatcherListener($manager));
No-op when no active access has been set on the manager.
- [`Phalcon\Auth\AbstractAuthDispatcherListener`](#authabstractauthdispatcherlistener)
- **`Phalcon\Auth\Mvc\AuthDispatcherListener`**
`Phalcon\Auth\AbstractAuthDispatcherListener` · `Phalcon\Auth\Exception` · `Phalcon\Events\Event` · `Phalcon\Mvc\Dispatcher`
### Method Summary
### Methods
beforeExecuteRoute()
```php
public function beforeExecuteRoute(
Event $event,
Dispatcher $dispatcher
): bool;
```
getActionType()
```php
protected function getActionType(): string;
```
Source: https://docs.phalcon.io/5.20/api/phalcon_auth/index.mdx