Remember me functionality

[Hari KT]

So, I was looking to implement the remember me for the login. I didnot find a module for that.

The functionality will be some token saved on the user side, and on the first request make the user authenticate if he/she has the token with the request.

So the question is what will be the first hook, which will be called, so I can implement the hook to add the implementation.

Do you have any insights on the same?

[teppo]

First of all, I'll assume that you've read enough to know that there are more than a few gotchas to be taken into consideration. The tricky part, IMHO, isn't implementing this for ProcessWire -- getting it right and making it secure is way more complicated.

Once you got that figured out, you could set the token or whatever method you're using right after successful Session::login. Other part, logging the user in, depends on how and where you prefer this to happen. ProcessLogin::execute is one option you might want to consider.

Hope that helps a bit.

[netcarver]

@teppo

Great link! Learning some new things from it. Thank you.

[Hari KT]

Hey @teppo

You are right, I am bringing more security risks with remember me ;-) . And thank you for the help. I will try those and get back on it in the coming days.

[Hari KT]

Hey @teppo ,

I did tested with the 

ProcessLogin::execute

. But that is not the hook needed. I need the

ProcessController::execute

hook.

Thank you.

[Craig]

Hari KT, you may be interested in testing the module I have been working on to deliver this functionality - LoginPersistent.

[Hari KT]

Thank you Craig.