Myth:Auth

I came here to announce that beta-2 of Myth:Auth was just released and is a recommended update for anyone using it. Then I realized that I don't believe I ever officially announced it here. A few people have let others know about it for me (which I appreciate!) but that's not the same.

Consider this your formal announcement

What is Myth:Auth?

Myth:Auth handles your basic password-based authentication in the most secure manner that I know of. Some of the features are:

- Password-based authentication with secure remember-me functionality
- A flat role-based authorization system based on groups and permissions. Users can be in multiple groups. Permissions can be found from any of the groups the user is part of or specific to a single user.
- Easily extendable password validation for when a user is registering. Currently does basic length-only checks (as NIST doesn't recommend composition-based rules anymore), as well as checking variations of the user's personal info, and can check against known pwned passwords, either locally with a file of about 600,000 bad/hacked passwords, or through Have I Been Pwned.
- Simple, easily replaceable, views for login, registration, and forgotten password flow.
- Supports email verification.
- Group and Permission filters for routing or controller filters to restrict routes by. Also an auth trait for use within controllers themselves.
- Debug toolbar integration

At some point in the future I would like to extend it to support other forms of authentication, like HTTP Basic/Digest, JWT, or social logins. No promises when that might happen, but that is planned to happen at some point.

Support Development •  CodeIgniter 4 Foundations • Practical CodeIgniter 3  • CodeIgniter Tutorials