Username/password, session-backed authentication adapter for zend-expressive-authentication.

License: BSD 3-Clause "New" or "Revised" License

PHP 100.00%

zend-expressive-authentication-session's Introduction

zend-expressive-authentication-session

Repository abandoned 2019-12-31

This repository has moved to mezzio/mezzio-authentication-session.

This library provides a zend-expressive-authentication adapter that handles form-based username/password authentication credentials where the user details are subsequently stored in a session.

Installation

Run the following to install this library:

$ composer require zendframework/zend-expressive-authentication-session

Documentation

Documentation is in the doc tree, and can be compiled using mkdocs:

$ mkdocs build

You may also browse the documentation online.

zend-expressive-authentication-session's People

Stargazers

Watchers

Forkers

weierophinney ezimuel alextech samsonasik wshafer marcguyer michaldomarecki thomasvargiu xerkus colmbus72 vestigegroup isabella232

zend-expressive-authentication-session's Issues

Default config prevents config exception

I was not able to find an open or closed issue matching what I'm seeing.
This is not a question. (Questions should be asked on slack (Signup for Slack here) or our forums.)

The default settings prevents the config redirect exception in the factory.

zend-expressive-authentication-session/src/ConfigProvider.php

Line 27 in 69c871e

'redirect' => '', // URI to which to redirect if no valid credentials present

zend-expressive-authentication-session/src/PhpSessionFactory.php

Lines 33 to 37 in 69c871e

 if (! isset($config['redirect'])) { 

 throw new Exception\InvalidConfigException( 

 'The redirect configuration is missing for authentication' 

 ); 

 }

We can remove/comment out the default config option or add detection for empty redirect values. I think the first is better.

Documentation: An alternative login workflow

As requested in #19 here is my current login workflow.

I've laid out all the related code in this gist

I'm not sure how to present an alternative workflow in the documentation therefor I'm starting this discussion to figure out the how's and where's. If you want take the code and incorporate it into the documentation yourselves then that's fine too, I'm not much of a documentation guy 😄

we cannot use zend-expressive-authentication-session with zend-expressive-authentication v1

I have first installed the latest version of zend-expressive-authentication, then I wanted to add zend-expressive-authentication-session by doing

composer require zend-expressive-authentication-session

I got this error

Problem 1
- Installation request for zendframework/zend-expressive-authentication-session ^0.5.0 -> satisfiable by zendframework/zend-expressive-authentication-session[0.5.0].
- zendframework/zend-expressive-authentication-session 0.5.0 requires zendframework/zend-expressive-authentication ^0.5.0 -> satisfiable by zendframework/zend-expressive-authentication[0.5.0] but these conflict with your requirements or minimum-stability.

If I look into https://github.com/zendframework/zend-expressive-authentication-session/blob/master/composer.json#L24,
the requirement specify ^0.5 so v1 doesn't satisfy the condition

Would it possible to update the requirements so that it is working with v1.0 ? thank you in advance

Bug when a user doesn't exist anymore

There is a problem with the user factory closure:

zend-expressive-authentication-session/src/PhpSession.php

Lines 63 to 69 in 93ba096

 $this->userFactory = function ( 

 string $identity, 

 array $roles = [], 

 array $details = [] 

 ) use ($userFactory) : UserInterface { 

 return $userFactory($identity, $roles, $details); 

 };

When a user doesn't exist anymore in the repository, the user factory should be able to return null. Right now aTypeError is thrown.

expressive 3 preview: try install zend-expressive-authentication-session:^1.0.0-dev got error reference of http-interop/http-middleware 0.4.1

I was not able to find an open or closed issue matching what I'm seeing.
This is not a question. (Questions should be asked on slack (Signup for Slack here) or our forums.)

Provide a narrative description of what you are trying to accomplish.

Code to reproduce the issue

composer require zendframework/zend-expressive-authentication-session:^1.0.0-dev

Expected results

Working

Actual results

Problem 1
    - Installation request for zendframework/zend-expressive-authentication-session ^1.0.0-dev -> satisfiable by zendframework/zend-expressive-authentication-session[1.0.x-dev].
    - zendframework/zend-expressive-authentication-session 1.0.x-dev requires zendframework/zend-expressive-session ^0.1.0 -> satisfiable by zendframework/zend-expressive-session[0.1.0, 0.1.x-dev].
    - zendframework/zend-expressive-session 0.1.0 requires http-interop/http-middleware ^0.4.1 -> satisfiable by http-interop/http-middleware[0.4.1].
    - zendframework/zend-expressive-session 0.1.x-dev requires http-interop/http-middleware ^0.4.1 -> satisfiable by http-interop/http-middleware[0.4.1].
    - Conclusion: don't install http-interop/http-middleware 0.4.1

	if (! isset($config['redirect'])) {
	throw new Exception\InvalidConfigException(
	'The redirect configuration is missing for authentication'
	);
	}

	$this->userFactory = function (
	string $identity,
	array $roles = [],
	array $details = []
	) use ($userFactory) : UserInterface {
	return $userFactory($identity, $roles, $details);
	};

zendframework / zend-expressive-authentication-session Goto Github PK