PHPackages schnitzler/frontend-user-login-token - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Authentication & Authorization](/categories/authentication) 4. / 5. schnitzler/frontend-user-login-token ActiveTypo3-cms-extension[Authentication & Authorization](/categories/authentication) schnitzler/frontend-user-login-token ==================================== A TYPO3 extension that generates frontend user login tokens 14.3.0(1mo ago)03GPL-2.0-or-laterPHPPHP ~8.2.0 || ~8.3.0 || ~8.4.0 || ~8.5.0CI passing Since May 8Pushed 1mo agoCompare [ Source](https://github.com/alexanderschnitzler/frontend-user-login-token)[ Packagist](https://packagist.org/packages/schnitzler/frontend-user-login-token)[ RSS](/packages/schnitzler-frontend-user-login-token/feed)WikiDiscussions main Synced 1w ago READMEChangelogDependencies (13)Versions (2)Used By (0) schnitzler/frontend-user-login-token ==================================== [](#schnitzlerfrontend-user-login-token) > Token-based frontend login for TYPO3 — no password required, straight from the CLI. Anyone managing TYPO3 instances with many frontend users across different groups knows the pain: to debug a specific user you either need their password or have to reset it temporarily. This extension solves that cleanly — a single CLI command generates a time-limited login link. No password, no database entry. --- Usage ----- [](#usage) The entry point is the following CLI command: ``` php vendor/bin/typo3 schnitzler:frontend-user-login-token:find-frontend-user [q] ``` Without an argument, all frontend users are listed. Passing a search term filters by the following fields: - `uid` - `username` - `first_name` - `last_name` The result is a table of users with a login link that can be copied directly into the browser. --- Anatomy of a Login Link ----------------------- [](#anatomy-of-a-login-link) ``` /?logintype=login &login-token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1aWQiOjEsImV4cCI6MTc3ODE4MDAyMX0.b3Aw17vsaumpCehEpWmWht3mXEpMD-yxdGhxiN57X9M &hmac=2552db5124551ce5ff5377b70c966c1e1ab7d047 ``` The link consists of three parts: ParameterPurpose`logintype=login`Instructs TYPO3 to use the login mechanism`login-token`The JWT itself, containing `uid` and expiry timestamp`hmac`Signature to verify the token's integrityTokens expire after **1 hour** by default. --- Technical Details ----------------- [](#technical-details) - The token is generated **on the fly** and is **never stored in the database**. - It is a **JWT** (JSON Web Token) containing only the user ID and an expiration date. - Once the extension detects a login link, it validates the signature and initiates the login — **without a POST request**. - Both the JWT and the HMAC are generated using the **TYPO3 Security Framework**, derived from `$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey']`. - Tokens cannot be guessed due to cryptographic signing. --- Security Considerations ----------------------- [](#security-considerations) Warning An intercepted login link grants immediate access to the corresponding frontend account — no further knowledge about the user required. The extension is an excellent fit for **development and testing**. For production use, the risk should be consciously evaluated. That said, the author has been running it in production for over two years. ### Health Score 41 — FairBetter than 87% of packages Maintenance94 Actively maintained with recent releases Popularity4 Limited adoption so far Community6 Small or concentrated contributor base Maturity51 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Unknown Total 1 Last Release 32d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/fd83531162fa868781394299eb6c38d4ffa2224056426ff908cba42bfb5147e0?d=identicon)[schnitzler](/maintainers/schnitzler) --- Top Contributors [![alexanderschnitzler](https://avatars.githubusercontent.com/u/711459?v=4)](https://github.com/alexanderschnitzler "alexanderschnitzler (2 commits)") --- Tags typo3typo3-cms-extension ### Code Quality Static AnalysisPHPStan Code StylePHP CS Fixer Type Coverage Yes ### Embed Badge ![Health badge](/badges/schnitzler-frontend-user-login-token/health.svg) ``` [![Health](https://phpackages.com/badges/schnitzler-frontend-user-login-token/health.svg)](https://phpackages.com/packages/schnitzler-frontend-user-login-token) ``` ### Alternatives [typo3/cms TYPO3 CMS is a free open source Content Management Framework initially created by Kasper Skaarhoj and licensed under GNU/GPL. 1.2k1.9M122](/packages/typo3-cms)[typo3/cms-core TYPO3 CMS Core 3312.9M4.7k](/packages/typo3-cms-core)[pagemachine/searchable TYPO3 extension to index and search content with Elasticsearch 1039.3k](/packages/pagemachine-searchable)[eliashaeussler/typo3-warming Warming - Warms up Frontend caches based on an XML sitemap. Cache warmup can be triggered via TYPO3 backend or using a console command. Supports multiple languages and custom crawler implementations. 22249.2k](/packages/eliashaeussler-typo3-warming)[friendsoftypo3/content-blocks TYPO3 CMS Content Blocks - Content Types API | Define reusable components via YAML 101466.4k44](/packages/friendsoftypo3-content-blocks)[shopware/core Shopware platform is the core for all Shopware ecommerce products. 585.4M506](/packages/shopware-core) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)