Welcome to the Cookbook

action (string $action = ':controller/:action')

Wenn man als Teil seiner ACL-Struktur ACOs verwendet, kann man folgendermaßen den Pfad zum ACO-Knoten erhalten, der an ein bestimmtes Controller/Action-Paar geknüpft ist:

    $acoNode = $this->Auth->action('users/delete');

1. $acoNode = $this->Auth->action('users/delete');

Wenn keine Werte übergeben werden, wird das aktuelle Controller/Action-Paar verwendet.

Es gibt zur Zeit keine Übersetzung für diesen Abschnitt. Bitte hilf mit und übersetze ihn. Mehr Informationen zu Übersetzungen

If you have some actions in your controller that you don't have to authenticate against (such as a user registration action), you can add methods that the AuthComponent should ignore. The following example shows how to allow an action named 'register'.

    function beforeFilter() {
        ...
        $this->Auth->allow('register');
    }

1. function beforeFilter() {
2. ...
3. $this->Auth->allow('register');
4. }

If you wish to allow multiple actions to skip authentication, you supply them as parameters to the allow() method:

    function beforeFilter() {
        ...
        $this->Auth->allow('foo', 'bar', 'baz');
    }

1. function beforeFilter() {
2. ...
3. $this->Auth->allow('foo', 'bar', 'baz');
4. }

Shortcut: you may also allow all the actions in a controller by using '*'.

    function beforeFilter() {
        ...
        $this->Auth->allow('*');
    }

1. function beforeFilter() {
2. ...
3. $this->Auth->allow('*');
4. }

If you are using requestAction in your layout or elements you should allow those actions in order to be able to open login page properly.

The auth component assumes that your actions names follow conventions and are underscored.

Es kann sein, dass du Actions aus der Liste der erlaubten Actions (festgelegt mittels $this->Auth->allow()) entfernen möchtest. Hier ist ein Beispiel:

    function beforeFilter() {
        $this->Auth->authorize = 'controller';
        $this->Auth->allow('delete');
    }

    function isAuthorized() {
        if ($this->Auth->user('role') != 'admin') {
            $this->Auth->deny('delete');
        }

        ...
    }

1. function beforeFilter() {
2. $this->Auth->authorize = 'controller';
3. $this->Auth->allow('delete');
4. }
5. function isAuthorized() {
6. if ($this->Auth->user('role') != 'admin') {
7. $this->Auth->deny('delete');
8. }
9. ...
10. }

Es gibt zur Zeit keine Übersetzung für diesen Abschnitt. Bitte hilf mit und übersetze ihn. Mehr Informationen zu Übersetzungen

hashPasswords ($data)

This method checks if the $data contains the username and password fields as specified by the variable $fields indexed by the model name as specified by $userModel. If the $data array contains both the username and password, it hashes the password field in the array and returns the data array in the same format. This function should be used prior to insert or update calls of the user when the password field is affected.

    $data['User']['username'] = 'me@me.com';
    $data['User']['password'] = 'changeme';
    $hashedPasswords = $this->Auth->hashPasswords($data);
    pr($hashedPasswords);
    /* returns:
    Array
    (
        [User] => Array
        (
            [username] => me@me.com
            [password] => 8ed3b7e8ced419a679a7df93eff22fae
        )
    )

    */

1. $data['User']['username'] = 'me@me.com';
2. $data['User']['password'] = 'changeme';
3. $hashedPasswords = $this->Auth->hashPasswords($data);
4. pr($hashedPasswords);
5. /* returns:
6. Array
7. (
8. [User] => Array
9. (
10. [username] => me@me.com
11. [password] => 8ed3b7e8ced419a679a7df93eff22fae
12. )
13. )
14. */

The $hashedPasswords['User']['password'] field would now be hashed using the password function of the component.

If your controller uses the Auth component and posted data contains the fields as explained above, it will automatically hash the password field using this function.

Es gibt zur Zeit keine Übersetzung für diesen Abschnitt. Bitte hilf mit und übersetze ihn. Mehr Informationen zu Übersetzungen

If you are using Acl in CRUD mode, you may want to assign certain non-default actions to each part of CRUD.

$this->Auth->mapActions(
	array(
		'create' => array('someAction'),
		'read' => array('someAction', 'someAction2'),
		'update' => array('someAction'),
		'delete' => array('someAction')
	)
);

1. $this->Auth->mapActions(
2. array(
3. 'create' => array('someAction'),
4. 'read' => array('someAction', 'someAction2'),
5. 'update' => array('someAction'),
6. 'delete' => array('someAction')
7. )
8. );

Es gibt zur Zeit keine Übersetzung für diesen Abschnitt. Bitte hilf mit und übersetze ihn. Mehr Informationen zu Übersetzungen

login($data = null)

If you are doing some sort of Ajax-based login, you can use this method to manually log someone into the system. If you don't pass any value for $data, it will automatically use POST data passed into the controller.

for example, in an application you may wish to assign a user a password and auto log them in after registration. In an over simplified example:

View:

echo $form->create('User',array('action'=>'register'));
echo $form->input('username');
echo $form->end('Register');

1. echo $form->create('User',array('action'=>'register'));
2. echo $form->input('username');
3. echo $form->end('Register');

Controller:

function register() {
    if(!empty($this->data)) {
        $this->User->create();
        $assigned_password = "password";
        $this->data['User']['password'] = $this->Auth->password($assigned_password);
        if($this->User->save($this->data)) {
            // send signup email containing password to the user
            $this->Auth->login($this->data);
            $this->redirect("home");
    }
}

1. function register() {
2. if(!empty($this->data)) {
3. $this->User->create();
4. $assigned_password = "password";
5. $this->data['User']['password'] = $this->Auth->password($assigned_password);
6. if($this->User->save($this->data)) {
7. // send signup email containing password to the user
8. $this->Auth->login($this->data);
9. $this->redirect("home");
10. }
11. }

One thing to note is that you must manually redirect the user after login as loginRedirect is not called.

$this->Auth->login($data) returns 1 on successful login, 0 on a failure

Mittels dieser Methode kann ein Nutzer schnell de-authentisiert und auf eine beliebige Seite weitergeleitet werden. Die Methode ist ferner nützlich, falls man einen "Ausloggen"-Link innerhalb eines geschützten Bereichs einer Anwendung bereitstellen möchte.

Beispiel:

$this->redirect($this->Auth->logout());

1. $this->redirect($this->Auth->logout());

Es gibt zur Zeit keine Übersetzung für diesen Abschnitt. Bitte hilf mit und übersetze ihn. Mehr Informationen zu Übersetzungen

password (string $password)

Pass in a string, and you can get what the hashed password would look like. This is an essential functionality if you are creating a user registration screen where you have users enter their password a second time to confirm it.

if ($this->data['User']['password'] ==
    $this->Auth->password($this->data['User']['password2'])) {

    // Passwords match, continue processing
    ...
} else {
    $this->flash('Typed passwords did not match', 'users/register');
}

1. if ($this->data['User']['password'] ==
2. $this->Auth->password($this->data['User']['password2'])) {
3. // Passwords match, continue processing
4. ...
5. } else {
6. $this->flash('Typed passwords did not match', 'users/register');
7. }

The auth component will automatically hash the password field if the username field is also present in the submitted data

Cake appends your password string to a salt value and then hashes it. The hashing function used depends on the one set by the core utility class Security (sha1 by default). You can use the Security::setHash function to change the hashing method. The salt value is used from your application's configuration defined in your core.php

Es gibt zur Zeit keine Übersetzung für diesen Abschnitt. Bitte hilf mit und übersetze ihn. Mehr Informationen zu Übersetzungen

user(string $key = null)

This method provides information about the currently authenticated user. The information is taken from the session. For example:

if ($this->Auth->user('role') == 'admin') {
    $this->flash('You have admin access');
}

1. if ($this->Auth->user('role') == 'admin') {
2. $this->flash('You have admin access');
3. }

It can also be used to return the whole user session data like so:

$data['User'] = $this->Auth->user();

1. $data['User'] = $this->Auth->user();

If this method returns null, the user is not logged in.

In the view you can use the Session helper to retrieve the currently authenticated user's information:

$session->read('Auth.User'); // returns complete user record
$session->read('Auth.User.first_name') //returns particular field value

1. $session->read('Auth.User'); // returns complete user record
2. $session->read('Auth.User.first_name') //returns particular field value

The session key can be different depending on which model Auth is configured to use. Eg. If you use model Account instead of User, then the session key would be Auth.Account