binarylogic/authlogic
Authlogic
Authlogic is a Ruby authentication framework designed to manage user identities, session persistence, and secure password hashing. It provides a system for verifying user credentials against stored records using configurable identity fields.
The framework distinguishes itself through its provider-based identity integration, allowing applications to connect authentication flows to external services including OAuth, OpenID Connect, LDAP, and various social media platforms. It also includes an extensibility model that executes custom user-defined code via hooks and callbacks during identity verification and session lifecycle processes.
The system covers broad capability areas including session management with secure cookie configuration, cryptographic password salting and hashing, and user activity monitoring to track login attempts and IP addresses. It further automates session transitions to move users into authenticated states following registration or password updates.
Features
- User Identity Verification - Validates user credentials against stored records and manages the login process using configurable identity fields.
- Password Hashing Utilities - A security tool that transforms plain text passwords into non-reversible hashes using configurable cryptographic providers.
- External Identity Provider Integration - Integrates authentication with external identity services including OpenID, LDAP, OAuth, and social media platforms.
- Session State Persistence - Persists authenticated user identities across multiple HTTP requests using secure cookies.
- Identity Provider Integrations - Connects authentication flows to external services like OAuth and LDAP via a standardized identity verification interface.
- OAuth and OpenID Connect Libraries - Provides a library for connecting applications to external identity providers using OAuth, OpenID Connect, and LDAP.
- Ruby Authentication Frameworks - Provides a comprehensive framework for managing user identities, session persistence, and secure password hashing in Ruby.
- Secure Session Management - Implements secure session management using signed browser storage to maintain user identity across requests.
- Password Hashing Utilities - Transforms plain text passwords into non-reversible hashes using cryptographic providers to secure stored credentials.
- Session Cookie Authentications - Tracks active users across multiple web requests using secure cookies to maintain a persistent authenticated state.
- Cookie-Based Session Management - Maintains authenticated state across HTTP requests by storing user identity in browser cookies.
- User Authentication Systems - Provides a secure user authentication system for Ruby applications to verify identities and protect private routes.
- Authentication Lifecycle Hooks - Executes custom logic through hooks and callbacks during the identity verification process.
- OAuth Provider Integrations - Integrates Ruby applications with external OAuth providers and social media platforms for third-party logins.
- Session Cookie Security - Provides secure configuration of SameSite and secure flags for authentication session cookies to prevent hijacking.
- Session - Runs custom logic via callbacks during the persistence or destruction of a user session.
- Execution Logic Extensions - Implements an extensibility model that executes custom user-defined code via hooks during identity verification and session lifecycles.
- Account Activity Monitoring - Tracks login attempts and records IP addresses to audit account usage and detect security threats.
- Authentication Audit Logs - Tracks login attempts and recording IP addresses to audit account usage and detect security threats.
- Authentication and OAuth - A clean and unobtrusive authentication solution.
