Class SessionAuthenticator

Session Authenticator

Namespace: Authentication\Authenticator

Property Summary

$_config protected

array<string, mixed>

Runtime config
$_configInitialized protected

bool

Whether the config property has already been configured with defaults
$_defaultConfig protected

array
Default config for this object.
- fields The fields to use to verify a user by.
- sessionKey Session key.
- identify Whether or not to identify user data stored in a session. This is useful if you want to remotely end sessions that have a different password stored, or if your identification logic needs additional conditions before a user can login.
$_identifier protected

Authentication\Identifier\IdentifierInterface

Identifier or identifiers collection.

Method Summary

__construct() public

Constructor
_configDelete() protected

Deletes a single config key.
_configRead() protected

Reads a config key.
_configWrite() protected

Writes a config key.
authenticate() public

Authenticate a user using session data.
clearIdentity() public

Clears the identity data
configShallow() public

Merge provided config with existing config. Unlike config() which does a recursive merge for nested keys, this method does a simple merge.
getConfig() public

Returns the config.
getConfigOrFail() public

Returns the config for this specific key.
getIdentifier() public

Gets the identifier.
impersonate() public

Impersonates a user
isImpersonating() public

Returns true if impersonation is being done
persistIdentity() public

Persists the users data
setConfig() public

Sets the config.
setIdentifier() public

Sets the identifier.
stopImpersonating() public

Stops impersonation

Method Detail

__construct() ¶ public

__construct(Authentication\Identifier\IdentifierInterface $identifier, array $config = [])

Constructor

Parameters

Authentication\Identifier\IdentifierInterface $identifier: Identifier or identifiers collection.
array $config optional: Configuration settings.

_configDelete() ¶ protected

_configDelete(string $key): void

Deletes a single config key.

Parameters

string $key: Key to delete.

Returns

void

Throws

Cake\Core\Exception\CakeException
if attempting to clobber existing config

_configRead() ¶ protected

_configRead(string|null $key): mixed

Reads a config key.

Parameters

string|null $key: Key to read.

Returns

mixed

_configWrite() ¶ protected

_configWrite(array<string, mixed>|string $key, mixed $value, string|bool $merge = false): void

Writes a config key.

Parameters

array<string, mixed>|string $key: Key to write to.
mixed $value: Value to write.
string|bool $merge optional: True to merge recursively, 'shallow' for simple merge, false to overwrite, defaults to false.

Returns

void

Throws

Cake\Core\Exception\CakeException
if attempting to clobber existing config

authenticate() ¶ public

authenticate(Psr\Http\Message\ServerRequestInterface $request): Authentication\Authenticator\ResultInterface

Authenticate a user using session data.

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request to authenticate with.

Returns

Authentication\Authenticator\ResultInterface

clearIdentity() ¶ public

clearIdentity(Psr\Http\Message\ServerRequestInterface $request, Psr\Http\Message\ResponseInterface $response): array

Clears the identity data

Parameters

Psr\Http\Message\ServerRequestInterface $request
Psr\Http\Message\ResponseInterface $response

Returns

array

configShallow() ¶ public

configShallow(array<string, mixed>|string $key, mixed|null $value = null): $this

Merge provided config with existing config. Unlike config() which does a recursive merge for nested keys, this method does a simple merge.

Setting a specific value:

$this->configShallow('key', $value);

Setting a nested value:

$this->configShallow('some.nested.key', $value);

Updating multiple config settings at the same time:

$this->configShallow(['one' => 'value', 'another' => 'value']);

Parameters

array<string, mixed>|string $key: The key to set, or a complete array of configs.
mixed|null $value optional: The value to set.

Returns

$this

getConfig() ¶ public

getConfig(string|null $key = null, mixed $default = null): mixed

Returns the config.

Usage

Reading the whole config:

$this->getConfig();

Reading a specific value:

$this->getConfig('key');

Reading a nested value:

$this->getConfig('some.nested.key');

Reading with default value:

$this->getConfig('some-key', 'default-value');

Parameters

string|null $key optional: The key to get or null for the whole config.
mixed $default optional: The return value when the key does not exist.

Returns

mixed

Configuration data at the named key or null if the key does not exist.

getConfigOrFail() ¶ public

getConfigOrFail(string $key): mixed

Returns the config for this specific key.

The config value for this key must exist, it can never be null.

Parameters

string $key: The key to get.

Returns

mixed

Configuration data at the named key

Throws

InvalidArgumentException

getIdentifier() ¶ public

getIdentifier(): Authentication\Identifier\IdentifierInterface

Gets the identifier.

Returns

Authentication\Identifier\IdentifierInterface

impersonate() ¶ public

impersonate(Psr\Http\Message\ServerRequestInterface $request, Psr\Http\Message\ResponseInterface $response, ArrayAccess $impersonator, ArrayAccess $impersonated): array

Impersonates a user

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request
Psr\Http\Message\ResponseInterface $response: The response
ArrayAccess $impersonator: User who impersonates
ArrayAccess $impersonated: User impersonated

Returns

array

isImpersonating() ¶ public

isImpersonating(Psr\Http\Message\ServerRequestInterface $request): bool

Returns true if impersonation is being done

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request

Returns

bool

persistIdentity() ¶ public

persistIdentity(Psr\Http\Message\ServerRequestInterface $request, Psr\Http\Message\ResponseInterface $response, ArrayAccess|array $identity): array

Persists the users data

Parameters

Psr\Http\Message\ServerRequestInterface $request
Psr\Http\Message\ResponseInterface $response
ArrayAccess|array $identity

Returns

array

setConfig() ¶ public

setConfig(array<string, mixed>|string $key, mixed|null $value = null, bool $merge = true): $this

Sets the config.

Usage

Setting a specific value:

$this->setConfig('key', $value);

Setting a nested value:

$this->setConfig('some.nested.key', $value);

Updating multiple config settings at the same time:

$this->setConfig(['one' => 'value', 'another' => 'value']);

Parameters

array<string, mixed>|string $key: The key to set, or a complete array of configs.
mixed|null $value optional: The value to set.
bool $merge optional: Whether to recursively merge or overwrite existing config, defaults to true.

Returns

$this

Throws

Cake\Core\Exception\CakeException
When trying to set a key that is invalid.

setIdentifier() ¶ public

setIdentifier(Authentication\Identifier\IdentifierInterface $identifier): $this

Sets the identifier.

Parameters

Authentication\Identifier\IdentifierInterface $identifier: IdentifierInterface instance.

Returns

$this

stopImpersonating() ¶ public

stopImpersonating(Psr\Http\Message\ServerRequestInterface $request, Psr\Http\Message\ResponseInterface $response): array

Stops impersonation

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request
Psr\Http\Message\ResponseInterface $response: The response

Returns

array

Property Detail

`$_config` ¶ protected

Runtime config

Type

array<string, mixed>

`$_configInitialized` ¶ protected

Whether the config property has already been configured with defaults

Type

bool

`$_defaultConfig` ¶ protected

Default config for this object.

fields The fields to use to verify a user by.
sessionKey Session key.
identify Whether or not to identify user data stored in a session. This is useful if you want to remotely end sessions that have a different password stored, or if your identification logic needs additional conditions before a user can login.

Type

array

`$_identifier` ¶ protected

Identifier or identifiers collection.

Type

Authentication\Identifier\IdentifierInterface

Namespaces

Class SessionAuthenticator

Property Summary

Method Summary

__construct() public

_configDelete() protected

_configRead() protected

_configWrite() protected

authenticate() public

clearIdentity() public

configShallow() public

getConfig() public

getConfigOrFail() public

getIdentifier() public

impersonate() public

isImpersonating() public

persistIdentity() public

setConfig() public

setIdentifier() public

stopImpersonating() public

Method Detail

__construct() ¶ public

Parameters

_configDelete() ¶ protected

Parameters

Returns

Throws

_configRead() ¶ protected

Parameters

Returns

_configWrite() ¶ protected

Parameters

Returns

Throws

authenticate() ¶ public

Parameters

Returns

clearIdentity() ¶ public

Parameters

Returns

configShallow() ¶ public

Parameters

Returns

getConfig() ¶ public

Usage

Parameters

Returns

getConfigOrFail() ¶ public

Parameters

Returns

Throws

getIdentifier() ¶ public

Returns

impersonate() ¶ public

Parameters

Returns

isImpersonating() ¶ public

Parameters

Returns

persistIdentity() ¶ public

Parameters

Returns

setConfig() ¶ public

Usage

Parameters

Returns

Throws

setIdentifier() ¶ public

Parameters

Returns

stopImpersonating() ¶ public

Parameters

Returns

Property Detail

$_config ¶ protected

Type

$_configInitialized ¶ protected

Type

$_defaultConfig ¶ protected

Type

`$_config` ¶ protected

`$_configInitialized` ¶ protected

`$_defaultConfig` ¶ protected

`$_identifier` ¶ protected