This class can be used to authenticate users in multiple domains at once.
It generates HTML with Javascript tags for one domain that also submits the same user name and password to the authentication page of another domain when the user is successfully authenticated in the main domain.
The class does not perform the actual verification of the submitted user name and password. It just provides means to specify an external callback function that can be customized to perform that verification.
This package can be used to register and authenticate users with records in a database.
It can register new users, confirm user registrations, authenticate existing users and retrieve user password to send by e-mail as reminders.
The user records are stored in database. The queries to perform each user record database access are defined in a XML configuration file.
Features list:
# Open or closed registration, via master password;
# User role support;
# Live authentication (changing session unique id from one request to another);
# Password recovery OR reset support;
# Hack prevention built-in system:
* logs user out when obsolete session id is used;
* logs user out if IP address changes from one request to another;
* logs user out when session lifetime times out;
* auto-locks user on too many failed login attempts; locks are IP-based and can be reset by master.
# Easy to configure, via external XML files (provided by ParamsProxy package, see dependencies);
# SQL injections proof, thanks to built-in database traffic encoding/decoding mechanism (provided by DbProxy package, see dependencies).
This class can be used to manage registrations and authenticate users with records in a MySQL database.
It can perform several types of operations with registered users of a site.
Currently it can create or update registered user records, activate user accounts, reset passwords, authenticate an user and start a login session, and end a login session.
This class can be used to authenticate and manage OTP user tokens for strong two-factor authentication.
It can create, update and delete tokens to authenticate users with one time passwords (OTP). The users data is stored in files.
The class can also check the user token using several algorithms: Mobile OTP (MOTP), OATH/HOTP (RFC 4226) and OATH/TOTP HOTP Time Based (RFC 4226 extension).
It works with compatible software tokens (iPhone, Android, PalmOS, Nokia and other Java J2ME capable phones, ...) and hardware tokens (Feitian, ZyXEL, Authenex, Seamoon, ...)