Auth Server

[at15]

We need a session library that

• use redis
• support token in header, like X-Bform-Token
• support cookie as fallback, make browser client easier to develop
• * admin page for monitor session

when this project completes, this package will be split out and published using composer.

• [x] cache library. finished in https://github.com/at15/bform/commit/3de15073e9ff404e00ef43defe85384ded37d804
• [ ] store session data in cache
• [ ] support header as identifier
• [ ] support cookie as identifier
• [ ] admin UI for view and invoke session
• [ ] split as a single package

Ref

• OAuth (can be used on own site) http://oauth2.thephpleague.com/authorization-server/which-grant/
• A Laravel implmentation using OAuthServer2 https://github.com/lucadegasperi/oauth2-server-laravel
• https://github.com/tymondesigns/jwt-auth
• https://github.com/illuminate/session

[at15]

can't use predis scan like redis-cache

$pattern = $prefix . '*';
        $cursor = 0;
        $counter = 0;
        do {
            $result = $this->client->scan($cursor, $pattern);
            $cursor = $result[0];
            if (!empty($result[1])) {
                $this->client->del($result[1]);
            }
            $counter++;
        } while ($cursor != 0);
        return $counter;

the second argument need to be an array .... btw: really lack of documentation ...

[at15]

should use array('MATCH' => 'foo*')

[at15]

the cache library is finished in 3de15073e9ff404e00ef43defe85384ded37d804, with some modification it would be a session library .... en.