PHPackages                             reekoheek/bono-auth - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. reekoheek/bono-auth

Abandoned → [xinix-technology/bono-auth](/?search=xinix-technology%2Fbono-auth)Library[Authentication & Authorization](/categories/authentication)

reekoheek/bono-auth
===================

Bono Auth

2.0.2(10y ago)18783MITPHP

Since Jan 2Pushed 7y ago1 watchersCompare

[ Source](https://github.com/xinix-technology/bono-auth)[ Packagist](https://packagist.org/packages/reekoheek/bono-auth)[ RSS](/packages/reekoheek-bono-auth/feed)WikiDiscussions master Synced 2w ago

READMEChangelog (1)Dependencies (2)Versions (20)Used By (0)

bono-auth
=========

[](#bono-auth)

Your solution to use authorization and authentication with Bono Framework.

Setup
=====

[](#setup)

To use bono-auth you have to setup bono using bono-auth middleware in config.php.

```
'bono.middlewares' => array(
  '\\Xinix\\BonoAuth\\Middleware\\AuthMiddleware' => array(
    ...
  ),
),
```

bono-auth has two drivers to use, each will have distinct configuration:

Xinix\\BonoAuth\\Driver\\NormAuth
---------------------------------

[](#xinixbonoauthdrivernormauth)

```
'bono.middlewares' => array(
  '\\Xinix\\BonoAuth\\Middleware\\AuthMiddleware' => array(
    'driver' => '\\Xinix\\BonoAuth\\Driver\\NormAuth'
  ),
),
```

Xinix\\BonoAuth\\Driver\\OAuth
------------------------------

[](#xinixbonoauthdriveroauth)

```
'bono.middlewares' => array(
  '\\Xinix\\BonoAuth\\Middleware\\AuthMiddleware' => array(
    'driver' => '\\Xinix\\BonoAuth\\Driver\\OAuth',
    'debug' => true, // enable or disable debug
    'baseUrl' => 'http://to.your.oauth.provider',
    'authUrl' => '/oauth/auth', // URI to access auth
    'tokenUrl' => '/oauth/token', // URI to get token
    'revokeUrl' => '/oauth/revoke', // URI to revoke auth
    'clientId' => '*the client id*',
    'clientSecret' => '*the client secret*',
    'redirectUri' => \Bono\Helper\URL::site('/login'), // application redirect url
    'scope' => 'user',
  ),
),
```

Above configuration will enable default bono-auth. The default value will prevent guest to access to every pages accessed. And after user get login, he will be able to access every pages available.

Authorization
=============

[](#authorization)

To authorize/deauthorize specific pages, you have to write codes to register filter "auth.authorize" that run before the middleware invoked by system. Usually you can put this codes in provider file. The codes will be in this following form:

```
$app->filter('auth.authorize', function ($options) {
  // something to do
  return $allowed;
});
```

Return value
------------

[](#return-value)

If the return value will be the one of the following conditions:

- True (bool), url is authorized
- False (bool), url is not authorized
- (original argument), bono-auth will decide authorization for you, the default is logined user authorize to access and guest user is not authorized

Arguments
---------

[](#arguments)

The filter will accept single argument $options. As the nature of Bono Filter, the $options will be return value of previous ran of the same context name function. The first time value of $options will be the URI string (or assoc array contains URI string).

If the $options is\_bool, it means one of previous filter functions already handle the URI, you can skip the current filter function by adding if-statement.

```
$app->filter('auth.authorize', function ($options) {
  if (is_bool($options)) {
    return $options;
  }
  // something to do
});
```

###  Health Score

34

—

LowBetter than 75% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity18

Limited adoption so far

Community12

Small or concentrated contributor base

Maturity72

Established project with proven stability

 Bus Factor1

Top contributor holds 95.8% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~97 days

Recently: every ~223 days

Total

19

Last Release

2806d ago

Major Versions

0.2.2 → 1.0.02015-08-07

1.0.2 → 2.0.02016-05-15

### Community

Maintainers

![](https://www.gravatar.com/avatar/9ccba8ab264c930769a607c77fd9ad54731fb85847278488cc1f6d283130df0c?d=identicon)[reekoheek](/maintainers/reekoheek)

---

Top Contributors

[![reekoheek](https://avatars.githubusercontent.com/u/299394?v=4)](https://github.com/reekoheek "reekoheek (46 commits)")[![apriantopramana](https://avatars.githubusercontent.com/u/3231439?v=4)](https://github.com/apriantopramana "apriantopramana (1 commits)")[![januarsiregar](https://avatars.githubusercontent.com/u/6738681?v=4)](https://github.com/januarsiregar "januarsiregar (1 commits)")

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/reekoheek-bono-auth/health.svg)

```
[![Health](https://phpackages.com/badges/reekoheek-bono-auth/health.svg)](https://phpackages.com/packages/reekoheek-bono-auth)
```

###  Alternatives

[kartik-v/yii2-password

Useful password strength validation utilities for Yii Framework 2.0

761.2M17](/packages/kartik-v-yii2-password)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)