binarylogic/authlogic
Authlogic
Authlogic est un framework d'authentification Ruby conçu pour gérer les identités des utilisateurs, la persistance des sessions et le hachage sécurisé des mots de passe. Il fournit un système pour vérifier les identifiants des utilisateurs par rapport aux enregistrements stockés en utilisant des champs d'identité configurables.
Le framework se distingue par son intégration d'identité basée sur des fournisseurs, permettant aux applications de connecter les flux d'authentification à des services externes incluant OAuth, OpenID Connect, LDAP et diverses plateformes de médias sociaux. Il inclut également un modèle d'extensibilité qui exécute du code personnalisé défini par l'utilisateur via des hooks et des callbacks pendant les processus de vérification d'identité et de cycle de vie de session.
Le système couvre de larges domaines de capacités, notamment la gestion de session avec configuration de cookie sécurisée, le salage et le hachage cryptographique des mots de passe, et la surveillance de l'activité utilisateur pour suivre les tentatives de connexion et les adresses IP. Il automatise en outre les transitions de session pour déplacer les utilisateurs vers des états authentifiés après l'inscription ou les mises à jour de mot de passe.
Features
- User Identity Verification - Validates user credentials against stored records and manages the login process using configurable identity fields.
- Password Hashing Utilities - A security tool that transforms plain text passwords into non-reversible hashes using configurable cryptographic providers.
- External Identity Provider Integration - Integrates authentication with external identity services including OpenID, LDAP, OAuth, and social media platforms.
- Session State Persistence - Persists authenticated user identities across multiple HTTP requests using secure cookies.
- Identity Provider Integrations - Connects authentication flows to external services like OAuth and LDAP via a standardized identity verification interface.
- OAuth and OpenID Connect Libraries - Provides a library for connecting applications to external identity providers using OAuth, OpenID Connect, and LDAP.
- Ruby Authentication Frameworks - Provides a comprehensive framework for managing user identities, session persistence, and secure password hashing in Ruby.
- Secure Session Management - Implements secure session management using signed browser storage to maintain user identity across requests.
- Password Hashing Utilities - Transforms plain text passwords into non-reversible hashes using cryptographic providers to secure stored credentials.
- Session Cookie Authentications - Tracks active users across multiple web requests using secure cookies to maintain a persistent authenticated state.
- Cookie-Based Session Management - Maintains authenticated state across HTTP requests by storing user identity in browser cookies.
- User Authentication Systems - Provides a secure user authentication system for Ruby applications to verify identities and protect private routes.
- Authentication Lifecycle Hooks - Executes custom logic through hooks and callbacks during the identity verification process.
- OAuth Provider Integrations - Integrates Ruby applications with external OAuth providers and social media platforms for third-party logins.
- Session Cookie Security - Provides secure configuration of SameSite and secure flags for authentication session cookies to prevent hijacking.
- Session - Runs custom logic via callbacks during the persistence or destruction of a user session.
- Execution Logic Extensions - Implements an extensibility model that executes custom user-defined code via hooks during identity verification and session lifecycles.
- Account Activity Monitoring - Tracks login attempts and records IP addresses to audit account usage and detect security threats.
- Authentication Audit Logs - Tracks login attempts and recording IP addresses to audit account usage and detect security threats.
- Authentication and OAuth - A clean and unobtrusive authentication solution.
