Wiki articles tagged with "authentication"

Showing 21-25 of 25 items.

Use crypt() for password storage

Created 11 years ago by fsb, updated 9 years ago by fsb.

Update: This wiki has been rewritten to be in line with Yii 1.1.14. Since many of the detailed complexities are now handled by Yii, the article focuses on how the crypt() built-in function works and why it's important to use it correctly.

15 0
Viewed: 177 372 times
Version: 1.1
Category: Tutorials

How to login from different tables in Yii2

Created 6 years ago by AndroideLP, updated 4 years ago by lenovo.

The Problem: Yii2 utilizes by default UserIdentity configured in config/web.php for connection, this object apply one table to authentication ('identityClass' => 'app\panel\models\User'). How to authentication from diferent tables? Solution: Create instances in web.php to uses UserIdentify. eg:

5 0
Viewed: 62 135 times
Version: 2.0
Category: How-tos

How to write secure Yii1 applications

Created 12 years ago by François Gannaz, updated 3 years ago by François Gannaz.
  • Validate the user input (see below for details).
  • Protect (escape) your application output according to context (see below for a few output types, mostly HTML and SQL).
  • Test your application in debug mode.
    Set the constant YII_DEBUG to true (by default, it is defined in index.php) and put alongside error_reporting(E_ALL);. Then errors and warnings will stop the execution an...
80 0
Viewed: 311 478 times
Version: 1.1
Category: How-tos

Using multiple models in an identity

Created 5 years ago by samdark, updated 2 years ago by Néstor Acevedo.

Let's assume we have two models: Customer and Supplier and we want both to log in. Yii is quite flexible when it comes to authentication and authorization so it's possible.

8 2
Viewed: 35 678 times
Version: 2.0
Category: How-tos

JWT authentication tutorial

Created 2 years ago by Allan Jensen, updated 2 years ago by Allan Jensen.

JWT is short for JSON Web Token. It is used eg. instead of sessions to maintain a login in a browser that is talking to an API - since browser sessions are vulnerable to CSRF security issues. JWT is also less complicated than setting up an OAuth authentication mechanism.

13 0
Viewed: 152 085 times
Version: 2.0
Category: Tutorials