REST Authentication in PHP (CodeIgniter)

Question

I writing REST API form my web application. Application is written using CodeIgniter framework. Application itself is working fine, but I'm stuck on making REST Authentication. I think that basic Http Authentication will be good enough for some time. Public API is not yet planned.

Is there any code example how to achieve REST Authentication so after user is authenticated he can freely call all protected methods.

Phil Sturgeon · Accepted Answer · 2010-05-09 22:25:49Z

40

I have written up a REST Controller to make your REST applications easier to build. You can read all about it on NetTuts: Working with RESTful services in CodeIgniter.

answered May 9, 2010 at 22:25

Phil Sturgeon

30.8k12 gold badges82 silver badges118 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

zidane Over a year ago

This looks like a very comprehensive tutorial, I will read it certainly.

k00k Over a year ago

Just checked out Phil's tut, great stuff Phil, very informative!

zidane Over a year ago

You coverd security in REST_Controller! This is great, thx again!

Ryan Ore Over a year ago

I have used your Class and it worked perfectly. I didn't even know this article existed. Looks like a good read.

John Christian De Chavez Over a year ago

Hi. we are already now in authentication problem using the REST you made @PhilSturgeon. We try to login post but it seems it cant remember the session. the next request is not logged in. how can we access the session made on the login request?

|

ZZ Coder · Accepted Answer · 2010-05-09 11:57:39Z

8

If you use HTTPS, you can use Basic authentication and it's very easy to do. Just add following code to your controller,

   if (empty($this->input->server('PHP_AUTH_USER')))
   {
       header('HTTP/1.0 401 Unauthorized');
       header('HTTP/1.1 401 Unauthorized');
       header('WWW-Authenticate: Basic realm="My Realm"');
       echo 'You must login to use this service'; // User sees this if hit cancel
       die();
    }

    $username = $this->input->server('PHP_AUTH_USER');
    $password = $this->input->server('PHP_AUTH_PW');

    // Check username and password

I use mod_php, your auth variable names maybe different if using other SAPI modules.

answered May 9, 2010 at 11:57

ZZ Coder

75.7k30 gold badges139 silver badges169 bronze badges

1 Comment

zidane Over a year ago

So HTTP is a must, for encrypting plain user name and password in each request. Thx!

Collectives™ on Stack Overflow

REST Authentication in PHP (CodeIgniter)

2 Answers 2

7 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

7 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related