TinyAuth adds public-action rules and role permissions to CakePHP’s official Authentication and Authorization plugins. Store those rules in auth_allow.ini and auth_acl.ini instead of repeating them in controllers.
Your application still provides login actions, authentication services, identities and role data. TinyAuth checks access to controller actions; use entity policies for permissions on individual records. The AuthUser component and helper expose user data and role checks, and can also work with a custom identity provider.
- Installation: install and load the plugins you need.
- Getting started: configure a small public-action list and role ACL.
- Authentication and Authorization: service integration and rule syntax.
- Configuration: shared options and cache invalidation.
- Upgrade guide: migration notes and current behavior changes.
The searchable documentation website also covers adapters, impersonation, helpers, CLI commands and the DebugKit panel.
The original CakePHP 2 blog post describes the project’s beginnings; use the website above for current setup instructions.