Skip to content
BranchesTags

Repository files navigation

CodeIgniter Shield

Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status

Shield is the official authentication and authorization framework for CodeIgniter 4. While it does provide a base set of tools that are commonly used in websites, it is designed to be flexible and easily customizable.

The primary goals for Shield are:

  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.

Authentication Methods

Shield provides two primary methods Session-based and Access Token authentication out of the box.

It also provides HMAC SHA256 Token and JSON Web Token authentication.

Session-based

This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality. This can be used for standard web applications, as well as for single page applications. Includes full controllers and basic views for all standard functionality, like registration, login, forgot password, etc.

Access Token

These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user can have more than one. This can be used for API authentication of third-party users, and even for allowing access for a mobile application that you build.

HMAC SHA256 Token

This is a slightly more complicated improvement on Access Token authentication. The main advantage with HMAC is the shared Secret Key is not passed in the request, but is instead used to create a hash signature of the request body.

JSON Web Token

JWT or JSON Web Token is a compact and self-contained way of securely transmitting information between parties as a JSON object. It is commonly used for authentication and authorization purposes in web applications.

Important Features

  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions

See the An Official Auth Library for more Info.

Getting Started

Prerequisites

Usage of Shield requires the following:

Installation

Installation is done through Composer.

composer require codeigniter4/shield

See the docs for more specific instructions on installation and usage recommendations.

Contributing

Shield does accept and encourage contributions from the community in any shape. It doesn't matter whether you can code, write documentation, or help find bugs, all contributions are welcome. See the CONTRIBUTING.md file for details.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgements

Every open-source project depends on its contributors to be a success. The following users have contributed in one manner or another in making Shield:

Contributors

Made with contrib.rocks.

The following articles/sites have been fundamental in shaping the security and best practices used within this library, in no particular order:

About

Authentication and Authorization for CodeIgniter 4

Resources

Readme
MIT license

Contributing

Contributing

Security policy

Security policy
Activity

Stars

2 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
GitHub - kenjis/codeigniter-shield: Authentication and Authorization for CodeIgniter 4 · GitHub
Skip to content
BranchesTags
Repository files navigation
CodeIgniter Shield
Unit TestsStatic AnalysisPHP-CS-FixerRectorPsalmArchitectureCoverage Status
Shield is the official authentication and authorization framework for CodeIgniter 4.
While it does provide a base set of tools
that are commonly used in websites, it is designed to be flexible and easily customizable.
The primary goals for Shield are:
  1. It must be very flexible and allow developers to extend/override almost any part of it.
  2. It must have security at its core. It is an auth lib after all.
  3. To cover many auth needs right out of the box, but be simple to add additional functionality to.
Authentication Methods
Shield provides two primary methods Session-based and Access Token
authentication out of the box.
It also provides HMAC SHA256 Token and JSON Web Token authentication.
Session-based
This is your typical email/username/password system you see everywhere. It includes a secure "remember-me" functionality.
This can be used for standard web applications, as well as for single page applications. Includes full controllers and
basic views for all standard functionality, like registration, login, forgot password, etc.
Access Token
These are much like the access tokens that GitHub uses, where they are unique to a single user, and a single user
can have more than one. This can be used for API authentication of third-party users, and even for allowing
access for a mobile application that you build.
HMAC SHA256 Token
This is a slightly more complicated improvement on Access Token authentication.
The main advantage with HMAC is the shared Secret Key
is not passed in the request, but is instead used to create a hash signature of the request body.
JSON Web Token
JWT or JSON Web Token is a compact and self-contained way of securely transmitting
information between parties as a JSON object. It is commonly used for authentication
and authorization purposes in web applications.
Important Features
  • Session-based authentication (traditional ID/Password with Remember-me)
  • Stateless authentication using Personal Access Tokens
  • Optional Email verification on account registration
  • Optional Email-based Two-Factor Authentication after login
  • Magic Link Login when a user forgets their password
  • Flexible Groups-based access control (think Roles, but more flexible)
  • Users can be granted additional Permissions
See the An Official Auth Library for more Info.
Getting Started
Prerequisites
Usage of Shield requires the following:
Installation
Installation is done through Composer.
composer require codeigniter4/shield
See the docs for more specific instructions on installation and usage recommendations.
Contributing
Shield does accept and encourage contributions from the community in any shape. It doesn't matter
whether you can code, write documentation, or help find bugs, all contributions are welcome.
See the CONTRIBUTING.md file for details.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Acknowledgements
Every open-source project depends on its contributors to be a success. The following users have
contributed in one manner or another in making Shield:
Contributors
Made with contrib.rocks.
The following articles/sites have been fundamental in shaping the security and best practices used
within this library, in no particular order:
About
Authentication and Authorization for CodeIgniter 4
Resources
Readme
MIT license
Contributing
Contributing
Security policy
Security policy
Activity
Stars
2 stars
Watchers
0 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages