Q: User Registration and Authentication Solutions

Question

PHP

Good afternoon.
This is my first post, and in it, in fact, I want to ask:

• what ready-made solutions for user authentication and registration would you recommend to use on a resource that does not contain critical confidential data?
• What ready-made solutions would you recommend using for third-party authentication through popular Runet resources?
• Are there comprehensive solutions that combine the previous two points?

At the moment, I am the first to develop a small web system myself and from scratch (javascript, php), gaining experience, so I will be very happy to receive practical advice.

Answer 1

All solutions for authorization are in php (session mechanism). But in order to further simplify the task, you can use frameworks like: Yii, Kohana, Zend. I know for sure that for Yii, the blog creation manual completely chews up how to do authorization. There is only one thing, but most likely you will not be able to use the framework authorization and work outside the framework itself, therefore you will have to learn it. There are modules for authorization through Internet resources for frameworks, usually called OAuth. As a rule, there are a lot of manuals on how to integrate them into the framework. But again, all this is within the framework of frameworks.

Answer 2

Most major mail services have their own API. Take a look at uLogin . A very simple way to authenticate. You can also request additional fields.

Answer 3

In terms of theory, for the future, keep in mind that today there are the following "protocols" of external authentication:
- OpenID - categorically not recommended, as the most insecure and outdated
- OAuth v.1 - also not recommended for use in new software products due to low security
- OAuth v.2 - information security specialists still allow its use, although there is information about the hacking method
- SAML v.2 - the most secure today and therefore recommended for use, but its implementation has a lot of "pitfalls"