dereuromark / cakephp-tinyauth

5.3.2 2026-07-17 10:28 UTC

Requires

• php: >=8.2
• cakephp/cakephp: ^5.1.1

Requires (Dev)

• cakephp/authentication: ^3.0.1 || ^4.0
• cakephp/authorization: ^3.0.1
• cakephp/debug_kit: ^5.0.1
• composer/semver: ^3.0
• fig-r/psr2r-sniffer: dev-master
• phpunit/phpunit: ^11.5 || ^12.1 || ^13.0

MIT

• Mark Scherer

• authorization
• Authentication
• plugin
• cakephp
• middleware
• acl
• roles
• permissions
• tinyauth

Published on Packagist.org on 2026-07-17 10:30 UTC

README

TinyAuth adds public-action rules and role permissions to CakePHP’s official Authentication and Authorization plugins. Store those rules in auth_allow.ini and auth_acl.ini instead of repeating them in controllers.

Your application still provides login actions, authentication services, identities and role data. TinyAuth checks access to controller actions; use entity policies for permissions on individual records. The AuthUser component and helper expose user data and role checks, and can also work with a custom identity provider.

Documentation

• Installation: install and load the plugins you need.
• Getting started: configure a small public-action list and role ACL.
• Authentication and Authorization: service integration and rule syntax.
• Configuration: shared options and cache invalidation.
• Upgrade guide: migration notes and current behavior changes.

The searchable documentation website also covers adapters, impersonation, helpers, CLI commands and the DebugKit panel.

The original CakePHP 2 blog post describes the project’s beginnings; use the website above for current setup instructions.