Projects tagged ‘authorization’ and ‘php’

The Open Web SSO project provides core identity services to simplify the implementation of transparent single sign-on as a security component in a network infrastructure. It provides the foundation ... [More] for integrating diverse web applications that might typically operate against a disparate set of identity repositories and are hosted on a variety of platforms such as web and application servers. [Less]

A PHP implementation of SAML 2.0 service provider and identity provider functionality. And is also compatible with Shibboleth 1.3 and 2.0.

It is a community created to help develop components that help define and move common digital identities throughout the computing world. Currently the main focus is on defining a common identity frame ... [More] work, provide authentication and credential caching, enable common roles and authorization, and ensure compliance via common record collecting. [Less]

This is a module for Snappad that allows you to quickly and easily lock down your website.

A web application framework for PHP

Openpasl seeks to deliver a set of clean, simple, and loosely-coupled libraries that don't require developers to build their applications around some bloated, all things to all people, framework. ... [More] Openpasl is not an MVC framework. Some day openpasl may include several MVC models that can be used for quickly building out applications targeted at the web GTK or other presentation layers. However, this is not an explicit goal. There are common needs for applications and there are patterns of repeated tasks. The goal of openpasl is to take on some of the common architectural pieces and get them out of the way so that you can focus on the overall architecture of your application and the business logic behind it. openpasl is unstableThe current set of proposed layers to target: Database: Database "abstraction". The goal is to create a lightweight packaging system for custom/raw database drivers, with the option to use PEAR::MDB2 as a generic, portable driver. It would be encouraged to use the native PHP driver for your db backend. Simple interfaces will allow developers to wrap PHP raw driver calls within a driver class. Authentication: Implement basic layers for authentication with additional driver support (ldap, radius, mysql, saml, etc). Authorization: Implement robust RBAC library to support very granular management of permissions. Workflow: Implement generic workflow engine(s) to support the rapid deployment of transactional processes. Web: Basic web libraries to support the deployment of web services with support of various protocols (Initially SOAP and REST). Basic libraries to support dynamic page creation, HTML templates, XML, schema, XSL template controls, code templates, etc. Threading: While it is possible to do some pretty robust threading in PHP, it's also a massively huge pain in the ass - with pitfalls at every corner. Openpasl will simplify this effort into a nice package. IPC: Inter-process communication, like threading, is almost a science of its own in PHP. Openpasl seeks to abstract much of the craziness away and provide a nice clean API for IPC through shared memory and sockets. Interpreters: Interpret a language (such as JavaScript) to be ran inside of PHP in a self-contained environment. Why openpasl? Well, not all PHP applications target the web browser directly. Perhaps you're writing a socket server and threading is important to you, perhaps you're writing a data portability layer, a web service, etc. Openpasl will not force you to use any architectural style for good or for worse. Openpasl will not pollute the global scope. Openpasl gets out of the way to allow you to make the decisions you need for your application and provides you the means to perform tasks that you're really not interested in becoming an expert on (ie threading and IPC in PHP). Openpasl wants to grow! Any additional library support is welcome. The one requirement. Keep it lean. Keep it light. Use proper assignment of responsibility. Keep things loosely-coupled. PHP version?If you're pulling from the repository openpasl runs on PHP 5.3 [Less]

A repository for new ideas and experiements in the form of SimpleSAMLphp modules. These may or may not be included as part of the simpleSAMLphp repository in the future.

DescriptionIf you are worried about your WordPress blog getting hacked, this can help immensely. It adds a 2nd layer of security to your blog by requiring a username and password to access anything in ... [More] the /wp-admin/ folder. How it worksThe plugin is simple, you just choose a username and password and you are done. It writes the .htaccess file, without messing it up. It also encrypts your password and creates the .htpasswd file, as well as setting the correct security-enhanced file permissions on both. SettingsThis plugin automatically picks all the right settings for where to save the .htpasswd and .htaccess files, but you can easily change those settings to anything you want. You can change it whenever you want right from your WordPress Admin Panel. Installationpload aa-password-protect.zip to the /wp-content/plugins/ directory nzip into its own folder /wp-content/plugins/aa-password-protect/aa-password-protect.php ctivate the plugin through the Plugins menu in WordPress by clicking "AskApache Password Protect" o to your Options Panel and open the "AskApache Password Protect" submenu. hoose a username and password and hit the "Password Protection" button. Example OutputHere is a sample of the .htpasswd file output by the plugin. # BEGIN AskApache Password Protect askapache:$1$UUNC/Y4z$2HrLVf23pizdtlUXazGbN1 # END AskApache Password Protect/wp-admin/.htaccess # BEGIN AskApache Password Protect AuthName "Authorization Required" AuthUserFile /htdocs/.htpasswd AuthGroupFile /dev/null AuthType Basic Require user askapache # END AskApache Password Protect [Less]

With wikiplex, you can let users create their own dokuwiki namespace and setup access control. wikiplex is integrated with DokuWiki and simpleSAMLphp. NOTE: This project is in an early stage! It ... [More] is not yet documented. If you need more information or have questions, contact Andreas Åkre Solberg [Less]

PHP security system that protect your web applications adding on your source ONLY ONE LINE OF CODE! Administrators can manage policies, authentication and authorisation for as many users and groups ... [More] , all through a single and intuitive Ajax based interface [Less]