rcs_us/slim-middleware-basic-acl

PSR-7 HTTP Authentication Access Middleware

1.0.2 2022-01-20 20:24 UTC

Requires

• php: ^5.5 || ^7.0 || ^8.0

Suggests

• tuupola/slim-basic-auth^2.3: If you do not already have a PSR-7 HTTP Authenticator, this is a good one to start with

MIT

• Matthew Rice

• middleware
• acl
• psr-7

README

This middleware provides a very simple way to implement ACL in a PSR-7 environment.

It has been tested with Slim Framework using the [PSR-7 Basic Auth Middleware] provided by tuupola (https://github.com/tuupola/slim-basic-auth).

Install

Install latest version using composer.

$ composer require rcs_us/slim-middleware-basic-acl

Usage

The middleware accepts two possible parameters.

1. An array of one or more usernames allowed to access the route. This compares against the value that is ultimately stored in $_SERVER["PHP_AUTH_USER"] | $request->getServerParams()["PHP_AUTH_USER"] .
2. A callable that can do more complicated comparisons on $_SERVER["PHP_AUTH_USER"] | $request->getServerParams()["PHP_AUTH_USER"] .

$app = new \Slim\App;
// .... implement HTTP Authentication , IE $app->add(new \Slim\Middleware\HttpBasicAuthentication( ... 

// array of usernames
$app->get("/path/of/your/route", "\App\Controller\SomeController:methodToCall")->add(new \Slim\Middleware\HttpBasicACL(["username1", "username2"]));

// callable
$app->get("/path/of/your/route", "\App\Controller\SomeController:methodToCall")->add(new \Slim\Middleware\HttpBasicACL(function ($request, $response) {
    // Some Logic Here Based On $_SERVER["PHP_AUTH_USER"] | $request->getServerParams()["PHP_AUTH_USER"] .
    // Returning false will trigger a 403, true will execute route
    return false;
}));