Daycry Auth Documentation

Welcome to the complete documentation for Daycry Auth, a comprehensive authentication and authorization library for CodeIgniter 4.

Authentication

Compliance & Operations

Main Features

Authentication

Multiple Authenticators: Session, Access Token (with scope enforcement), JWT (with refresh tokens), Magic Link
TOTP Two-Factor Authentication with backup codes and optional “Trust this device” bypass
Device Session Tracking with optional concurrent-session limit
Password Reset + Force Password Reset + optional rotation policy + history (no reuse)
OAuth 2.0 / Social Login: Google, GitHub, Facebook, Microsoft Azure, custom profile fields, OAuth events

Authorization

Groups & Permissions (RBAC) with optional persistent cache
API token scope enforcement (token-scope: filter)
Flexible Filters: Auth, chain, group, permission, token-scope, password-age, rate limiting, force-reset

Security

Per-User Account Lockout (atomic) — independent of IP-based blocking
Compromised-Password Recheck on Login (HIBP integration, opt-in)
Suspicious Login Detection with suspicious-login event for email alerts
Timing-safe OAuth state validation

Compliance & Operations

Granular audit log (auth_audit_logs) — 22 canonical event types, filterable CLI
GDPR helpers — JSON data export + account anonymization
Admin CLI: auth:tokens revoke, auth:sessions terminate, auth:totp reset, auth:audit, auth:gdpr export|anonymize
Complete Logging: CI4 Events + database login attempts + audit log
Highly Customizable: Extend or replace any component

Quick Start

composer require daycry/auth
php spark migrate --all
php spark auth:setup

// Login
$result = auth()->attempt(['email' => 'user@example.com', 'password' => 'secret']);

if ($result->isOK()) {
    return redirect()->to('/dashboard');
}