aluzed/redis-web-token

Redis Web Token with PHP

Why ?

In order to share our authentication between multiple instance and whatever technology you use, using RWT will bring some simplicity to all that stuff. By using third part component (redis), we'll be able to check token in each microservice., _(*1)

  ----------       ----------------
  | redis  | <-----|  PHP worker  |
  ----------       ----------------
    ^   ^
    |   |        ---------------------
    |   ---------|  Node instance 1  |
    |            ---------------------
    |
    |            ---------------------
    -------------|  Node instance 2  |
                 ---------------------

Usage

 [
    'scheme' => 'tcp',
    'host'   => 'localhost',
    'port'   => 6379,
    'prefix' => 'sess:'
  ],
  'custom' => [
    'expire' => (60 * 60 * 4), // 4 hours
    'verifyExtendsToken' => true
  ]
]);

// Authenticate
$token = $rwt->sign([
  'username' => 'john',
  'pasword' => 'doe123',
  'age'  => 21,
  'date' => $dateToStr
], $secretKey, [
  'expire' => 60 * 60 // 1 hour
]);

// Verifying token
$rwt->verify($token, $secretKey);

// Extend token
$rwt->extend($token, $secretKey);

// Destroy token
$rwt->destroy($token, $secretKey);

?>

RWT Parameters

When you require RWT, you should pass extra parameters to the function :, _(*2)

• {Array} Redis configuration, for example host, port, prefix...
• {Array} Custom RWT configuration, see options

RWT Custom Options

Methods

sign

Generate the redis token., _(*3)

Parameters, _(*4)

• {Object} User object
• {String} Secret
• {Object} expire key : Custom expire date (be careful with this value, if you use revive, your global expire configuration will overwrite this value each time we'll call verify method)

 verify

Check if hour token is alive an return the User object values we set at connection, if you edit user values during the session, those data may be outdated. You must call the sign method each time you update your user's values., _(*5)

Parameters, _(*6)

• {String} Token
• {String} Secret

 extend

Reset the TTL of our token with default expire value in our configuration., _(*7)

Parameters, _(*8)

• {String} Token
• {String} Secret

destroy

Destroy the token., _(*9)

Parameters, _(*10)

• {String} Token
• {String} Secret