binarylogic/authlogic
Authlogic
Authlogic 是一个 Ruby 身份验证框架，旨在管理用户身份、会话持久化和安全的密码哈希。它提供了一个系统，通过可配置的身份字段来验证用户凭据与存储记录的一致性。
该框架的独特之处在于其基于提供程序的身份集成，允许应用程序将身份验证流程连接到外部服务，包括 OAuth、OpenID Connect、LDAP 和各种社交媒体平台。它还包含一个扩展模型，通过钩子和回调在身份验证和会话生命周期过程中执行用户自定义代码。
该系统涵盖了广泛的能力领域，包括具有安全 Cookie 配置的会话管理、加密密码加盐和哈希处理，以及用于跟踪登录尝试和 IP 地址的用户活动监控。它还自动化了会话转换，使用户在注册或更新密码后进入已认证状态。
Features
- User Identity Verification - Validates user credentials against stored records and manages the login process using configurable identity fields.
- Password Hashing Utilities - A security tool that transforms plain text passwords into non-reversible hashes using configurable cryptographic providers.
- External Identity Provider Integration - Integrates authentication with external identity services including OpenID, LDAP, OAuth, and social media platforms.
- Session State Persistence - Persists authenticated user identities across multiple HTTP requests using secure cookies.
- Identity Provider Integrations - Connects authentication flows to external services like OAuth and LDAP via a standardized identity verification interface.
- OAuth and OpenID Connect Libraries - Provides a library for connecting applications to external identity providers using OAuth, OpenID Connect, and LDAP.
- Ruby Authentication Frameworks - Provides a comprehensive framework for managing user identities, session persistence, and secure password hashing in Ruby.
- Secure Session Management - Implements secure session management using signed browser storage to maintain user identity across requests.
- Password Hashing Utilities - Transforms plain text passwords into non-reversible hashes using cryptographic providers to secure stored credentials.
- Session Cookie Authentications - Tracks active users across multiple web requests using secure cookies to maintain a persistent authenticated state.
- Cookie-Based Session Management - Maintains authenticated state across HTTP requests by storing user identity in browser cookies.
- User Authentication Systems - Provides a secure user authentication system for Ruby applications to verify identities and protect private routes.
- Authentication Lifecycle Hooks - Executes custom logic through hooks and callbacks during the identity verification process.
- OAuth Provider Integrations - Integrates Ruby applications with external OAuth providers and social media platforms for third-party logins.
- Session Cookie Security - Provides secure configuration of SameSite and secure flags for authentication session cookies to prevent hijacking.
- Session - Runs custom logic via callbacks during the persistence or destruction of a user session.
- Execution Logic Extensions - Implements an extensibility model that executes custom user-defined code via hooks during identity verification and session lifecycles.
- Account Activity Monitoring - Tracks login attempts and records IP addresses to audit account usage and detect security threats.
- Authentication Audit Logs - Tracks login attempts and recording IP addresses to audit account usage and detect security threats.
- Authentication and OAuth - A clean and unobtrusive authentication solution.
