ApiTokenAuthenticator plugin

The CakePHP ApiTokenAuthenticator Plugin provides a straightforward token authentication mechanism for CakePHP 5 REST APIs. It allows developers to secure their API endpoints using tokens sent via HTTP headers, supporting both static and dynamic token generation with optional expiration.

Key Features

• Token-Based Authentication — Authenticates API requests using a token stored in a user table and sent in a custom HTTP header.
• Bearer Token Support — Configurable to work with standard Authorization: Bearer headers.
• Flexible Configuration — Customizable token field names, header names, prefixes, and login endpoints via a config file.
• Token Expiration — Optional token invalidation after a set period by using a token_expiration datetime field.
• JSON-First Workflow — Designed for JSON APIs, with built-in support for JSON requests and responses.

Philosophy

The plugin follows a minimal and pragmatic approach, focusing on essential token authentication without unnecessary complexity, while remaining highly configurable to fit different project needs.