Help with the Table Configuration

Schema Diagram : User Login Session Table

User Login Session Table

The user login session table is used to validate user login credentials.
For security purposes, if a users credentitals do not match those stored within the table, the user is automatically logged out.

The login session feature is based on a technique put forward by two articles by Charles Miller and Barry Jaspan.
Charles Miller's 'Best Practices' article.
Barry Jaspan's Improved Best Practices.

Table and Column Setup

Notes

Example

// Defining the table, join and column names.

$config['database']['user_sess']['table'] = 'user_login_sessions';
$config['database']['user_sess']['join'] = 'user_login_sessions.usess_uacc_fk';
$config['database']['user_sess']['columns']['user_id'] = 'usess_uacc_fk';

User Login Session/Cookie Settings

Define how the library handles the behaviour of login sessions and cookies.

Table and Column Setup

Login Cookie and Session Settings

// Defining whether login details are validated on every page load.
$config['security']['validate_login_onload'] = TRUE;

// Defining the lifetime of a user login session in seconds.
$config['security']['login_session_expire'] = 60*60*3;
				
// Defining whether a users login time is extended when their session token is validated (On every page load).
$config['security']['extend_login_session'] = TRUE;

// Defining whether a user is logged out as soon as the browser is closed.
$config['security']['logout_user_onclose'] = TRUE;

// Defining whether a users 'logged in via password' status is removed as soon as the browser is closed.
$config['security']['unset_password_status_onclose'] = TRUE;

// Defining the lifetime of a users login cookies in seconds, this includes the 'Remember me' cookies.
$config['security']['user_cookie_expire'] = 60*60*24*14;

// Defining whether a users 'Remember me' login cookies have their lifetime extended when their 
// session token is validated.
$config['security']['extend_cookies_on_login'] = TRUE;

Session Names

flexi auth uses CI sessions to store and serve authentication data between pages loads.

All flexi auth session data is stored together within one session array, this helps maintain a tidy session structure.
If required, the name of each session within the flexi auth library can be defined.

// Auth Session Name.
// Set the root auth session name saved as an array in the CI session, 
// all other flexi auth session data is then stored within this array.
$config['sessions']['name'] = 'flexi_auth';

// Primary User Indentifier Session.
// Contains the $config['database']['settings']['primary_identity_col'] config column value.
// This value is then used to internally identify the user when performing CRUD functions.
$config['sessions']['user_identifier'] = 'user_identifier';

// User Account Data Sessions.
// Used for performing various CRUD functions.
$config['sessions']['user_id'] = 'user_id';
$config['sessions']['is_admin'] = 'admin';
$config['sessions']['group'] = 'group';
$config['sessions']['privileges'] = 'privileges';

// Login Via Password.
// Indicate whether the user logged in via entering a password or was logged in automatically  
// via the 'Remember me' function.
$config['sessions']['logged_in_via_password'] = 'logged_in_via_password';

// Login Session Token.
// The login session token is used to help validate a users login credentials against a stored database token.
// Note: Only used when "$config['security']['validate_login_onload'] = true" has been defined.
$config['sessions']['login_session_token'] = 'login_session_token';

// Math Captcha Flash Session.
// Used to store the answer of a math captcha question, this data is stored only in a CI flash session 
// and so will only be available on the next page and is then deleted.
$config['sessions']['math_captcha'] = 'math_captcha';

Cookie Names

flexi auth uses cookies to store and serve authentication data for the next time a user visits the website.
If required, the name of each cookie within the flexi auth library can be defined.

// 'Remember me' Cookies.
// Used to store 'Remember me' data to automatically log a user in next time they visit the website.
$config['cookies']['user_id'] = 'user_id';
$config['cookies']['remember_series'] = 'remember_series';
$config['cookies']['remember_token'] = 'remember_token';

// Login Session Cookie.
// The cookie login session token is used to invalidate a users login session when they close their 
// browser by deleting itself.
// Note: Only used when "config['security']['validate_login_onload'] = TRUE" and
// "$config['security']['logout_user_onclose'] = TRUE" have been defined.
$config['cookies']['login_session_token'] = 'login_session_token';

// Login Via Password Cookie.
// The login via password cookie token is used to invalidate a users 'logged in via password' status
// when they close their browser by deleting itself.
// Note: Only used when "config['security']['logout_user_onclose'] = FALSE" has been defined.
$config['cookies']['login_via_password_token'] = 'login_via_password_token';