yiirocks/voyti

Highly customizable and extensible user management, authentication, and authorization Yii3 extension

dev-main / 1.0.x-dev 2026-07-28 12:26 UTC

Requires

• php: >=8.3
• ext-intl: *
• psr/clock: ^1.0
• psr/event-dispatcher: ^1.0
• psr/http-factory: ^1.0
• psr/http-message: ^1.0 || ^2.0
• psr/http-server-middleware: ^1.0
• yiisoft/active-record: ^1.0
• yiisoft/auth: ^3.2
• yiisoft/cookies: ^1.2
• yiisoft/csrf: ^2.0
• yiisoft/data: ^2.0
• yiisoft/data-db: ^1.0
• yiisoft/db-migration: ^2.0
• yiisoft/form-model: ^1.1
• yiisoft/html: ^4.0
• yiisoft/http: ^1.2
• yiisoft/input-http: ^1.0
• yiisoft/json: ^1.0
• yiisoft/mailer: ^6.1
• yiisoft/rbac-db: dev-fix-101
• yiisoft/router: ^4.0
• yiisoft/security: ^1.2
• yiisoft/session: ^3.0
• yiisoft/translator-message-php: ^1.0
• yiisoft/user: ^2.3
• yiisoft/validator: ^2.6
• yiisoft/yii-console: ^2.3
• yiisoft/yii-dataview: ^1.1
• yiisoft/yii-view-renderer: ^7.1

Requires (Dev)

• chillerlan/2fa-qrcode-bundle: ^2.0
• dg/bypass-finals: ^1.10
• friendsofphp/php-cs-fixer: @stable
• infection/infection: ^0.34.0
• nyholm/psr7: ^1.8
• phpunit/phpunit: @stable
• squizlabs/php_codesniffer: @stable
• vimeo/psalm: ^6.0
• yiirocks/recaptcha: ^1.0
• yiisoft/config: ^1.6
• yiisoft/data-response: ^2.2
• yiisoft/db-sqlite: ^2.0
• yiisoft/di: *
• yiisoft/router-fastroute: ^4.0
• yiisoft/yii-auth-client: dev-master

Suggests

• chillerlan/2fa-qrcode-bundle: Time-based One-Time Password (TOTP) 2 Factor Authentication and QR code generator for authenticator app setup
• yiirocks/recaptcha: Google reCAPTCHA v2 and v3 field + server-side validator for Yii3
• yiisoft/data-response: Required for the REST API (voyti-routes-api): JSON response formatting for the user CRUD endpoints
• yiisoft/yii-auth-client: Social/OAuth2 login (google, github, linkedin, microsoft365, facebook, vkontakte, x, yandex)
• yiisoft/yii-runner-console: Allows to run console application
• yiisoft/yii-runner-http: Allows to run HTTP application

BSD-3-Clause

• Mr.42

• user
• extension
• management
• auth
• yii
• rbac
• yii3

Published on Packagist.org on 2026-07-28 12:26 UTC

README

войти
/vɐjˈtʲi/
verb

"to enter" or "to log in"

Highly customizable and extensible user management, authentication, and authorization extension for Yii Framework 3.

Originally ported from Usuario, Voyti has since been rebuilt around modern PSR standards and Yiisoft components. It has been extensively redesigned to provide a flexible, modular foundation that adapts to a wide range of authentication and authorization requirements.

Stats for Nerds

Features

• User Management — Registration, email confirmation, login/logout with remember-me, password recovery, password expiration
• Profile Management — User profiles with gravatar, timezone, bio, and a personal website link
• Social Authentication — Various built-in auth clients
• Two-Factor Authentication — TOTP (authenticator app) and email 2FA with enforced-per-permission support, plus one-time backup codes for account recovery
• RBAC Management — Full admin UI for roles, permissions, and rules with parent-child hierarchy, assignment management, and filtering
• Identity Switching — Admins can temporarily switch into another user's identity for support or debugging, then restore their own session with one click
• Session Management — Session tracking and termination
• GDPR Compliance — Consent management, data export, anonymized deletion with admin notification
• Password Policies — Minimum complexity requirements, max age enforcement via middleware
• Email Change Confirmation — Three modes: immediate, confirm new address, confirm both old and new
• REST API — Optional JSON API for user CRUD
• CAPTCHA — Optional reCAPTCHA v2/v3 integration via yiirocks/recaptcha
• i18n — Built-in translations for multiple languages
• Themed Views — Bootstrap 5 views shipped by default; mail templates separate and independently overridable

Requirements

• PHP 8.3+
• ext-intl
• Various yiisoft packages (automatic installation via composer)

Installation

The package could be installed via composer:

composer require yiirocks/voyti

Documentation

Installation steps, the full configuration reference, routes, middleware, social auth setup, RBAC, console commands, and events are all covered at Yii.Rocks.

Testing

# Unit tests
composer phpunit

# Mutation testing
composer infection

# Static analysis
composer psalm

# Code style fixer
composer php-cs-fixer

See docs/internals.md for details on the testing/QA tooling.