Creating Login Process with Zend_Auth

Let's create login screen with Zend_Auth. You can get the source code of this article from here.

Create the file application/bootstrap.php with the following content.
Please modify APP_BASE and CONFIG_PATH properly.

<?php
set_include_path('../library' . PATH_SEPARATOR . get_include_path());
define('APP_BASE', '../application');
define('CONFIG_PATH', APP_BASE . '/config.ini');
 
require_once 'Zend/Controller/Front.php';
require_once 'Zend/Layout.php';
 
$layout = Zend_Layout::startMvc();
//$layout->getView()->baseUrl = '/yourBaseUrl';
Zend_Controller_Front::run(APP_BASE . '/controllers');

[staging]
database.adapter         = pdo_mysql
database.params.host     = localhost
database.params.username = db_user
database.params.password = db_password
database.params.dbname   = db_name
auth.tableName           = users
auth.identityColumn      = username
auth.credentialColumn    = password

CREATE TABLE users
(
    id integer AUTO_INCREMENT NOT NULL PRIMARY KEY,
    username varchar(20) NOT NULL,
    password varchar(20) NOT NULL
);
 
INSERT INTO users (username, password)
    VALUES ('testuser', 'testpassword');

Create the file application/constorllers/IndexController.php with the following content.

<?php
require_once 'Zend/Controller/Action.php';
require_once 'Zend/Db.php';
require_once 'Zend/Auth.php';
require_once 'Zend/Auth/Adapter/DbTable.php';
require_once 'Zend/Form.php';
require_once 'Zend/Config/Ini.php';
 
class IndexController extends Zend_Controller_Action
{
    protected $_auth = null;
 
    protected function getAuthAdapter()
    {
        $config = new Zend_Config_Ini(CONFIG_PATH, 'staging');
        $params = $config->database->params->toArray();
        $dbAdapter = Zend_Db::factory($config->database->adapter, $params);
        $authAdapter =  new Zend_Auth_Adapter_DbTable($dbAdapter);
        $authAdapter->setTableName($config->auth->tableName)
                    ->setIdentityColumn($config->auth->identityColumn)
                    ->setCredentialColumn($config->auth->credentialColumn);
        return $authAdapter;
    }
 
    public function getLoginForm()
    {
        $form = new Zend_Form(array(
            'method'   => 'post',
            'action'   => $this->_request->getBaseUrl() . '/index/login',
            'elements' => array(
                'username' => array('text', array(
                    'required' => true,
                    'label' => 'User Name',
                    'filters' => array(
                        'StringTrim',
                        'StringToLower'
                    ),
                    'validators' => array(
                        'alnum',
                        array('stringLength', true, array(6, 20)),
                        array('regex', false, array('/^[a-z][a-z0-9]*$/'))
                    ),
                )),
                'password' => array('password', array(
                    'required' => true,
                    'label' => 'Password',
                    'validators' => array(
                        array('stringLength', true, array(6, 20))
                    ),
                )),
                'submit' => array('submit', array(
                    'label' => 'Send'
                ))
            ),
        ));
 
        return $form;
    }
 
    public function init()
    {
        $this->_auth = Zend_Auth::getInstance();
    }
 
    public function indexAction()
    {
        $this->_forward('login');
    }
 
    public function loginAction()
    {
        $form = $this->getLoginForm();
        if ($this->getRequest()->isPost()) {
            if ($form->isValid($_POST)) {
                $values = $form->getValues();
                // authenticate username and password
                $adapter = $this->getAuthAdapter();
                $adapter->setIdentity($values['username'])
                        ->setCredential($values['password']);
                $result = $this->_auth->authenticate($adapter);
                if ($result->isValid())
                {
                    return $this->_helper->redirector('index', 'profile');
                }
                else
                {
                    $this->view->message = 'Authentication Error';
                }
            }
        }
 
        $this->view->form = $form;
    }
 
    public function logoutAction()
    {
        $this->_auth->clearIdentity();
        $this->_forward('login');
    }
}

Create the file application/constorllers/ProfileController.php with the following content.
When the function authenticate of Zend_Auth succeed, the identity will be stored to storage(as default, it is session).

<?php
require_once 'Zend/Controller/Action.php';
require_once 'Zend/Auth.php';
 
class ProfileController extends Zend_Controller_Action
{
    protected $_auth = null;
 
    public function init()
    {
        $this->_auth = Zend_Auth::getInstance();
    }
 
    public function preDispatch()
    {
        if (!$this->_auth->hasIdentity())
        {
            $this->_forward('login', 'index');
        }
    }
 
    public function indexAction()
    {
        $this->view->identity = $this->_auth->getIdentity();
    }
}

Create the file application/views/scripts/index/login.phtml with the following content.

<span style="color: red;"><?= $this->message ?></span>
<?= $this->form; ?>

Create the file application/views/scripts/profile/index.phtml with the following content.

 
 
Hello <?= $this->identity ?>
 

Let's access your web server and check how the login process works. If you executed the above-mentioned sql, you can login with testuser/testpassword.

Date	Content
2008/4/9	Published
2008/4/18	The forward process after authentication was changed to the redirect process.