binarylogic/authlogic
Authlogic
Authlogic es un framework de autenticación de Ruby diseñado para gestionar identidades de usuario, persistencia de sesiones y hashing seguro de contraseñas. Proporciona un sistema para verificar las credenciales de usuario frente a registros almacenados utilizando campos de identidad configurables.
El framework se distingue por su integración de identidad basada en proveedores, permitiendo a las aplicaciones conectar flujos de autenticación a servicios externos incluyendo OAuth, OpenID Connect, LDAP y diversas plataformas de redes sociales. También incluye un modelo de extensibilidad que ejecuta código definido por el usuario mediante hooks y callbacks durante los procesos de verificación de identidad y ciclo de vida de la sesión.
El sistema cubre amplias áreas de capacidad, incluyendo la gestión de sesiones con configuración de cookies seguras, salting y hashing criptográfico de contraseñas, y monitoreo de actividad del usuario para rastrear intentos de inicio de sesión y direcciones IP. Además, automatiza las transiciones de sesión para mover a los usuarios a estados autenticados después del registro o actualizaciones de contraseña.
Features
- User Identity Verification - Validates user credentials against stored records and manages the login process using configurable identity fields.
- Password Hashing Utilities - A security tool that transforms plain text passwords into non-reversible hashes using configurable cryptographic providers.
- External Identity Provider Integration - Integrates authentication with external identity services including OpenID, LDAP, OAuth, and social media platforms.
- Session State Persistence - Persists authenticated user identities across multiple HTTP requests using secure cookies.
- Identity Provider Integrations - Connects authentication flows to external services like OAuth and LDAP via a standardized identity verification interface.
- OAuth and OpenID Connect Libraries - Provides a library for connecting applications to external identity providers using OAuth, OpenID Connect, and LDAP.
- Ruby Authentication Frameworks - Provides a comprehensive framework for managing user identities, session persistence, and secure password hashing in Ruby.
- Secure Session Management - Implements secure session management using signed browser storage to maintain user identity across requests.
- Password Hashing Utilities - Transforms plain text passwords into non-reversible hashes using cryptographic providers to secure stored credentials.
- Session Cookie Authentications - Tracks active users across multiple web requests using secure cookies to maintain a persistent authenticated state.
- Cookie-Based Session Management - Maintains authenticated state across HTTP requests by storing user identity in browser cookies.
- User Authentication Systems - Provides a secure user authentication system for Ruby applications to verify identities and protect private routes.
- Authentication Lifecycle Hooks - Executes custom logic through hooks and callbacks during the identity verification process.
- OAuth Provider Integrations - Integrates Ruby applications with external OAuth providers and social media platforms for third-party logins.
- Session Cookie Security - Provides secure configuration of SameSite and secure flags for authentication session cookies to prevent hijacking.
- Session - Runs custom logic via callbacks during the persistence or destruction of a user session.
- Execution Logic Extensions - Implements an extensibility model that executes custom user-defined code via hooks during identity verification and session lifecycles.
- Account Activity Monitoring - Tracks login attempts and records IP addresses to audit account usage and detect security threats.
- Authentication Audit Logs - Tracks login attempts and recording IP addresses to audit account usage and detect security threats.
- Authentication and OAuth - A clean and unobtrusive authentication solution.
