ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Ion Auth - Lightweight Auth System based on Redux Auth 2

February 10, 2010 7:00pm

Subscribe [287]
  • #76 / Mar 23, 2010 6:00am

    Spir

    139 posts

    Anybody up for translating Ion Auth?

    I’ll make a translation in french.

  • #77 / Mar 23, 2010 10:12am

    Sinclair

    119 posts

    Anybody up for translating Ion Auth?

    I will translate for Portuguese language.

    Regards,

  • #78 / Mar 23, 2010 10:18am

    Frank Rocco

    109 posts

    Can I allow users to register with ion?

    Thanks

  • #79 / Mar 23, 2010 10:21am

    Spir

    139 posts

    Can I allow users to register with ion?

    Thanks

    http://codeigniter.com/wiki/Ion_Auth_-_Lightweight_Auth_System/

  • #80 / Mar 23, 2010 11:32am

    Frank Rocco

    109 posts

    Looks like only admins can create users?

  • #81 / Mar 23, 2010 11:49am

    Sinclair

    119 posts

    You can change the Test code. It is only an example.

  • #82 / Mar 23, 2010 12:49pm

    Frank Rocco

    109 posts

    Ok, I am looking into how hard it would be to use my existing hashed passwords from dx_auth.
    I do not want the users to recreate them.

  • #83 / Mar 23, 2010 1:28pm

    Ben Edmunds

    812 posts

    Do you know the hashing algorithm dx_auth uses?

  • #84 / Mar 23, 2010 2:21pm

    Kyle Short

    11 posts

    Does Ion Auth support multiple group assignments per user? My application will need to allow a user to be a member of 1-N projects, and they could be assigned to different roles on each project that they have access to.

    I know how I will develop this out…just curious if there is anything in Ion Auth that I should look to leverage for this aspect. BTW, everything in Ion Auth seems very straightforward (although I am not sure what the intention is in having a user belong to a single group…but I may be missing something.)

    Thanks for a great library!

    K

  • #85 / Mar 23, 2010 2:28pm

    Frank Rocco

    109 posts

    Do you know the hashing algorithm dx_auth uses?

    /*
        * Function: _encode
        * Modified for DX_Auth
        * Original Author: FreakAuth_light 1.1
        */
        function _encode($password)
        {
            $majorsalt = $this->ci->config->item('DX_salt');
            
            // if PHP5
            if (function_exists('str_split'))
            {
                $_pass = str_split($password);
            }
            // if PHP4
            else
            {
                $_pass = array();
                if (is_string($password))
                {
                    for ($i = 0; $i < strlen($password); $i++)
                    {
                        array_push($_pass, $password[$i]);
                    }
                }
            }
    
            // encrypts every single letter of the password
            foreach ($_pass as $_hashpass)
            {
                $majorsalt .= md5($_hashpass);
            }
    
            // encrypts the string combinations of every single encrypted letter
            // and finally returns the encrypted password
            return md5($majorsalt);
        }

    I think this is it.

    Thanks

  • #86 / Mar 23, 2010 3:29pm

    Ben Edmunds

    812 posts

    Hey Frank,

    That algorithm isn’t even close to what Ion Auth uses…

    You would have to change both of the encryption methods of Ion Auth to encrypt using that algorithm.  Sorry that I don’t have a better solution for you…

  • #87 / Mar 23, 2010 4:16pm

    Frank Rocco

    109 posts

    Hi Ben,

    Thanks for checking.

    I may scrap and start over.

    Users keep forgetting passwords, forget password does not work.
    Since it is not active anymore, I do not want to spend anymore time.

    I would even consider storing passwords non-encrypted so we can look them up for them.

    We have to have Company Name, phone on registration.

    Regards,

    Frank

  • #88 / Mar 23, 2010 5:11pm

    Frank Rocco

    109 posts

    Hi Ben,

    I have some questions before I change over to your library.

    1. Does the forget password work for end users?
    2. Is it possible to have the program at login to see that no password is present and prompt for Company Name, Phone and new password. All would be required.

    Thanks

    Frank

  • #89 / Mar 23, 2010 11:21pm

    Ben Edmunds

    812 posts

    Frank,

    Yes the forget password works.

    Sure you could do that.  You would just try to log them in and then if there login doesn’t work ask for forget password and then on the return form from that ask them to update their company name, phone, etc then use the update_user() method.

    Make sense?  You could re-structure that flow as well if you wanted, Ion Auth is very flexible.

  • #90 / Mar 24, 2010 10:00am

    Frank Rocco

    109 posts

    Hi Ben,

    Is the Return Form called form the email sent from Forgot Password?
    Will the edit_user insert a record if it is not there?

    I forgot to ask if the register can be used by users, not just admin.

    Thanks

    Frank

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases