User authentication

Introduction

It is important to consider what authentication means. Authentication is a method where a trusted relationship is established to indicate that a user is who they say they are.

But users can be created within Zikula, but this is no requirement because there may be multiple and different authentiation methods!

Existing authentication methods

ZAuth

While the UsersModule is about the management of general user accounts, a separate module, ZAuthModule is responsible for the authentication of each user. This means that ZAuth is responsible for authentication credentials: username, email and password, for users that are created within zikula.

ZAuth therefore maintains the password and provides admin and user interfaces for the management of the credentials.
In contrast to external authentication methods ZAuth does that simply local instead of using remote data.

Settings

ZAuth configuration

Recovery/Editing users on CLI

A CLI command is provided (bin/console zikula:zauth:edit) to edit any user without needing to work through the web interface. This can be useful if the admin user has forgotten their password or something catastrophic happens.

bin/console zikula:zauth:edit 2  // edit uid=2 see --help for more information

OAuth

The OAuthModule provides the ability to use OAuth for authentication with common services, like:

Facebook: Based on thephpleague/oauth2-facebook.
GitHub: Based on thephpleague/oauth2-github.
Google: Based on thephpleague/oauth2-google.
Instagram: Based on thephpleague/oauth2-instagram.
LinkedIn: Based on thephpleague/oauth2-linkedin.

Others

There are many other method possible to do authentication (e.g. LDAP, OpenID, etc.)

TBD