infoburp/yii2-user

Yii 2 user authentication module

Yii 2 User

Yii 2 User - User authentication module, _(*1)

Integrated with yii2-otp by infoburp, with thanks to sam002

New version released 01/31/2016

This release contains a few small updates and bug fixes. Most notably, I've changed LoginForm.username to LoginForm.email and added a timezone field to app\models\Profile (thanks mnglkhn), _(*2)

If there are any issues, let me know and I'll get to it asap., _(*3)

Demo

• Demo

Features

• Quick setup - works out of the box so you can see what it does
• Easily extendable
• Registration using email and/or username
• Login using email and/or username
• Login/register via email (enter email > get link in inbox > click link to login/register)
• Email confirmation (+ resend functionality)
• Social authentication (facebook, twitter, google, linkedin, reddit, vkontakte)
• Account page
  • Updates email, username, and password
  • Requires current password
• Profile page
  • Lists custom fields for users, e.g., full_name
• Password recovery
• Admin crud via GridView

Installation

• Install Yii 2 using your preferred method
• Install package via composer "amnah/yii2-user": "^5.0"
• Update config file config/web.php and config/db.php

// app/config/web.php
return [
    'components' => [
        // NOTE: in the yii2-advanced-app, the user component should be updated in
        // 'frontend/config/main.php' and/or 'backend/config/main.php' (OR you can add it
        // to 'common/config' if you remove it from frontend/backend)
        'user' => [
            'class' => 'app\modules\user\components\User',
        ],
        'mailer' => [
            'class' => 'yii\swiftmailer\Mailer',
            'useFileTransport' => true,
            'messageConfig' => [
                'from' => ['admin@website.com' => 'Admin'], // this is needed for sending emails
                'charset' => 'UTF-8',
            ]
        ],
    ],
    'modules' => [
        'user' => [
            'class' => 'app\modules\user\Module',
            // set custom module properties here ...
        ],
    ],
];
// app/config/db.php
return [
    'class' => 'yii\db\Connection',
    // set up db info
];

• Run migration file
  • php yii migrate --migrationPath=@vendor/amnah/yii2-user/migrations
• Go to your application in your browser
  • http://localhost/pathtoapp/web/user
• Log in as admin using neo/neo (change it!)
• Set up module properties as desired
• Optional - Update the nav links in your main layout app/views/layouts/main.php

// app/views/layouts/main.php
<?php
'items' => [
    ['label' => 'Home', 'url' => ['/site/index']],
    ['label' => 'About', 'url' => ['/site/about']],
    ['label' => 'Contact', 'url' => ['/site/contact']],
    ['label' => 'User', 'url' => ['/user']],
    Yii::$app->user->isGuest ?
        ['label' => 'Login', 'url' => ['/user/login']] : // or ['/user/login-email']
        ['label' => 'Logout (' . Yii::$app->user->displayName . ')',
            'url' => ['/user/logout'],
            'linkOptions' => ['data-method' => 'post']],
],

Development Notes

How do I check user permissions?

This package contains a custom permissions system. Every user has a role, and that role has permissions in the form of database columns. It should follow the format: can_{permission name}., _(*4)

For example, the role table has a column named can_admin by default. To check if the user can perform admin actions:, _(*5)

if (!Yii::$app->user->can("admin")) {
    throw new HttpException(403, 'You are not allowed to perform this action.');
}
// --- or ----
$user = User::findOne(1);
if ($user->can("admin")) {
    // do something
};

Add more database columns for permissions as needed. If you need something more powerful, look into setting up [RBAC] (https://github.com/yiisoft/yii2/blob/master/docs/guide/security-authorization.md#role-based-access-control-rbac)., _(*6)

Note: If you set up an authManager component for RBAC, then Yii::$app->user->can() will use that instead of this module's custom role table., _(*7)

How do I add captcha to the forms?

Check out this great 3-step guide by dektrium. (Please note that the scenarios for the validation rules will depend on your project requirements.), _(*8)

How do I add i18n?

// app/config/web.php
return [
    'components' => [
        'i18n' => [
            'translations' => [
                'user' => [
                    'class' => 'yii\i18n\PhpMessageSource',
                    'basePath' => '@app/messages', // example: @app/messages/fr/user.php
                ]
            ],
        ],
    ],
];

How do I extend this package?

You can extend the classes directly. Depending on which ones you need, set the proper config property:, _(*9)

// app/config/web.php
'components' => [
    'user' => [
        'class' => 'app\components\MyUser',
        'identityClass' => 'app\models\MyUser',
    ],
],
'modules' => [
    'user' => [
        'class' => 'app\modules\MyModule',
        'controllerMap' => [
            'default' => 'app\controllers\MyDefaultController',
        ],
        'modelClasses'  => [
            'User' => 'app\models\MyUser', // note: don't forget component user::identityClass above
            'Profile' => 'app\models\MyProfile',
        ],
        'emailViewPath' => '@app/mail/user', // example: @app/mail/user/confirmEmail.php
    ],
],

For view files, you can use the theme component., _(*10)

// app/config/web.php
'components' => [
    'view' => [
        'theme' => [
            'pathMap' => [
                '@vendor/amnah/yii2-user/views' => '@app/views/user', // example: @app/views/user/default/login.php
            ],
        ],
    ],
],

I need more control. Can I just extend the whole thing?

You can always fork the package and modify it as needed., _(*11)

Or, if you want, you can integrate the package directly into your app by copying the files. This would make it more difficult to get updates, but it also guarantees that your app won't break after running composer update., _(*12)

To do so, you can use the helper command CopyController., _(*13)

• Add the module to your config/console.php to gain access to the command (Note: this is CONSOLE config)

// app/config/console.php
'modules' => [
    'user' => [
        'class' => 'app\modules\user\Module',
    ],
],

• Use the php yii user/copy command. For a [basic app] (https://github.com/yiisoft/yii2-app-basic), you can call the default command without any options

php yii user/copy --from=@vendor/amnah/yii2-user --to=@app/modules/user --namespace=app\\modules\\user

• Update config to point to your new package

// app/config/web.php + app/config/console.php
'modules' => [
    'user' => [
        'class' => 'app\modules\user\Module',
    ],
],

Alternatively, you can do this manually. Just copy/paste the files wherever you'd like and change the namespaces in the files. Replace app\modules\user with app\modules\user., _(*14)

Todo

• Tests
• Issues/requests? Submit a github issue