Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 7 years ago.
Improve this question
I'm going to build a back-end API REST using Laravel 5 for an iOS application (perhaps for Android in the future) so I found a couple of packages on github for the API authentication:
https://github.com/chrisbjr/api-guard
https://github.com/lucadegasperi/oauth2-server-laravel
And I want to know what's the different between them and what package could be the good choice for my API and of course If you have some advices or another packages to use, will be perfect.
Kind regards.
The oAuth2 server package follows rfc6749 and will help you have an Auth server like fb. (please see the link I provided for more information)
You may use a second app for it to separate your servers. (Auth server - resource server)
I never used api-guard but as it says in read me, It will provide a basic api key protection.
If you are planning to share your api with third party apps with user permission, I advice you to follow the oAuth2 path.
But if you are planning to use it in your app only, you definitely need api key only. Don't spend time for oAuth2 configurations.
Related
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed last year.
Improve this question
I have a native PHP project using SESSIONS for logging users in. Now the client needs to implement MFA within the project and require to request the confirmation code every 30 days of last verification.
Is there any documentation or resources to learn how to implement MFA on native PHP project? I searched but there aren't a lot of resources demonstrate how to do this thing on native PHP app.
You can use PHP library for Two Factor Authentication package: https://github.com/RobThree/TwoFactorAuth
This library can use Microsoft TFA authentication service on your mobile (works on Android and IOS). Session life control can be achieved by a custom cron job or PHP configuration session.gc_maxlifetime
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 7 years ago.
Improve this question
I'm planning to build a REST-Centric web dashboard in PHP. Without connecting to the databases directly. All data 100% comes in and goes out through REST calls alone. I've gone through few framework for writing API like slim, silex, Wave and Lumen, gonna pick one form this (for Azure & MSSQL), My concern is whether developing the Dashboard in Angular or some other js & pure HTML will have any security issue or is it safe to go with Server-side scripts for dashboard too?
Interesting question, I'm doing research for a similar project and this is what I have so far:
All the opensource out there don't fill 100% the needs I have for the project so I can't use them (ie: not mobile ready or not tv ready or poor browser support)
Because of the above, I will need to build a custom solution:
server side: Lumen framework for the log in and for securing+processing all the dashboard requests
client side: I will use a angular.js + dashboard template (from envato or from strapui). You can also do it with jQuery.
I hope it helps
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 1 year ago.
This post was edited and submitted for review last year and failed to reopen the post:
Original close reason(s) were not resolved
Improve this question
I plan to introduce a single sign-on (SSO) to my Laravel 5 applications. Basically, I have two websites on different domains. The idea is simple: if I'm already authenticated on one of them, I don't need to sign in on the other.
I've been looking for a solution for a while now, but I would like to ask you: Do you know or can recommend a package or library to provide SSO to Laravel application?
Native PHP solutions are also welcome. Thanks!
You can use the SAML standard in order to solve your SSO needs.
Review this github repository that help you implement a SAML service provider:
https://github.com/aacotroneo/laravel-saml2
If you need to implement a SAML Identity provider you can use simpleSAMLphp and use Lavarel database as authentication source.
https://simplesamlphp.org/docs/stable/simplesamlphp-idp
You can try out the miniorange/saml-laravel-free package. It makes things quite simple as it also provides a GUI and also does the whole authentication thing own its own.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 6 years ago.
Improve this question
I am looking for a PHP framework for a simple CRUD API that will need some authentication.
The sole purpose of this app is to be highly scalable.
The php API will be very simple CRUD Rest with mostly writes. This API will be used only in a iphone application where the iPhone App is sending user data every couple of milliseconds/seconds.
The way i see it
Load Balancer -> PHP Framework (Horizontally Scalable) -> RabbitMQ Cluster -> Some Java Servers talking tp Hadoop/Cassandra -> Hadoop/Cassandra Cluster
So the Load balancer will pick which app server to send the data. PHP will get the data via a POST, do some authentication work..Maybe some validation, and then send the data/message to RabbitMQ, which will then talk to some Java server to do reads and writes. There may be Cache server in there too somewhere.
So i just need a simple PHP framework that Can do Rest/CRUD, simple authentication. probably a token in the post request and then can talk to a RabbitMQ server.
The PHP framework should probably be light. I have used Laravel in the past and i know it has a queue implementation, but i think it may be too slow for this.
Any suggestions?
With those requirements I suggest you to use a microframework because of the lightweight. I have running a project with Slim microframework with good accomplishments. There are many in the market so I let you choose.
Look at:
http://xybu.me/a-comparison-of-php-micro-frameworks/
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 3 years ago.
Improve this question
Does PHP have any classes to receive email? Do you know of any good resources about this?
Try php-imap library. It's very popular and stable.
I had this question too and I wanted to get emails in real time so I worked out my own solution with google app engine. I basically made a small dedicated google app engine app to receive and POST emails to my main site.
You can check out Emailization (a little weekend project I did to do it for you), or you this small GAE app that should do the trick.
I kinda explained it more on another question.
Hope that helps!
If you want to receive e-mail in real-time(COOL? but have to use .appspot domain. You could off course also forward it to the .appspot domain) I would advise you to have a look at google app engine which is free to use(generous quota). You could forward the email it your webserver using asynchronous request which in turn let's you do all the cool stuf you would like it to do in PHP.
Python is pretty easy to learn especially after watching this video from Brett Slatkin explaining how to "Developing and deploying an application on Google App Engine" and the snippets in the google app engine documentation should get you started in no time.