property AuthComponent::$loginAction
A URL (defined as a string or array) to the controller action that handles logins. Defaults to
/users/login
property AuthComponent::$loginRedirect
The URL (defined as a string or array) to the controller action users should be redirected to after
logging in. This value will be ignored if the user has an Auth.redirect value in their session.
property AuthComponent::$logoutRedirect
The default action to redirect to after the user is logged out. While AuthComponent does not handle
post-logout redirection, a redirect URL will be returned from AuthComponent::logout().
Defaults to AuthComponent::$loginAction.
property AuthComponent::$unauthorizedRedirect
Controls handling of unauthorized access. By default unauthorized user is redirected to the referrer
url or AuthComponent::$loginAction or ‘/’. If set to false a ForbiddenException exception
is thrown instead of redirecting.
property AuthComponent::$request
Request object
property AuthComponent::$response
Response object
property AuthComponent::$sessionKey
The session key name where the record of the current user is stored. If unspecified, it will be
“Auth.User”.
AuthComponent::allow($action[, $action, ... ])
Set one or more actions as public actions, this means that no authorization checks will be performed
for the specified actions. The special value of ’*’ will mark all the current controllers actions as
public. Best used in your controller’s beforeFilter method.
AuthComponent::constructAuthenticate()
Loads the configured authentication objects.
AuthComponent::constructAuthorize()
Loads the authorization objects configured.
AuthComponent::deny($action[, $action, ... ])
Toggle one more more actions previously declared as public actions, as non-public methods. These
methods will now require authorization. Best used inside your controller’s beforeFilter method.
AuthComponent::flash($message)
Set a flash message. Uses the Session component, and values from AuthComponent::$flash.
AuthComponent::identify($request, $response)
Parameters
• $request (CakeRequest) – The request to use.
• $response (CakeResponse) – The response to use, headers can be sent if authentication
fails.