哪个 PHP 框架提供了功能最丰富的身份验证和/或访问控制？
我目前正在探索 Zend_Auth，它是 Zend Framework 的一部分，但对缺乏更高级的功能（例如随机数、身份验证令牌、锁定等）感到失望。在我最近的项目中，我实现了一个身份验证和 ACL（访问控制列表）方案，该方案具有以下功能：
- Salted hashes
- 自动 IP 地址锁定
- Nonce（几种类型）
- 身份验证令牌（在整个会话中持续存在）
如果我可以抽象这个功能并创建一个可重用的身份验证类，但我很好奇是否已经存在功能丰富的身份验证模块，这样我就可以节省自己的工作。如果没有，我肯定会这么做。
我想我的问题是这样的：您当前使用什么（基于数据库的）身份验证模块/方案，您对其功能满意吗？具体来说，是否有人使用支持我上面列出的功能的产品？
我期待您的回复。
I am currently exploring Zend_Auth, part of Zend Framework, but am dissapointed with the lack of more advanced features such as nonces, authentication tokens, lock-out, etc. In one of my recent projects, I implemented an authentication and ACL (Access Control List) scheme that has the following features:
- Salted hashes
- Automatic IP address lockout
- Nonces (several types)
- Authentication tokens (which persist for the entire session)
It would be great if I could abstract this functionality and make a reusable authentication class, but I was curious about whether a feature-rich authentication module already existed, so I could save myself the work. If not, I will most definitely do that.
I suppose my questions is this: What (database-based) authentication module/scheme are you currently using, and are you happy with its features? Specifically, is anyone using one that supports the features I listed above?
I look forward to your responses.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
有趣的是，我本来要回答“Zend Framework！”当我看到这个问题的时候。我猜你已经在使用它了。
我也使用采埃孚完成了很多您正在做的事情。诚然，它并不全是为你制造的，但零件就在那里。老实说，如果它已经放在一起，它就不会灵活并且不适用于许多用例。我宁愿让它适合我正在构建的应用程序，而不是围绕它构建我的应用程序。您可以将代码放入库中，并将其包含在您的其他 ZF 应用程序中。
不过，我也会对其他选择感兴趣。
Funny thing, I was going to answer "Zend Framework!" when I saw this question. I guess that you are already using that.
I've done a lot of what you are doing using ZF as well. True that it is not all made for you, but the parts are there. Honestly, if it was already put together, it would not be flexible and not apply to many use cases. I'd rather make it suit the app I'm building, rather than build my app around it. You can make your code into library and include that with your other ZF apps.
I'd be interested in other options as well though.