Disable Auto Redirect after logging into Cakephp 2.4

Question

I’m using Cakephp’s Auth 2.4 and if I try to access a link that needs login it redirects to the login form. For example:

I try to access: /projects/Edit/34 without being logged in. Cakephp then redirects to /login. After informing the user and password and authenticating Cakephp itself redirects me to /projects/Edit/34. Ok, so far so good, but it turns out that when I access the home page of my project and click on the login link (going to /login from the /) and authenticity it redirects me to the previous page, in case the initial of my project.

I would like in this case to be redirected to /panel

How to disable this auto redirect in Cakephp only for specific actions?

Follow my Appcontroller.php

class AppController extends Controller {
 public $components = array(
'DebugKit.Toolbar',
'Session', 
    'Auth' => array(
        'authenticate' => array(
            'Form' => array(
                'userModel' => 'User', 
                'fields' => array('username' => 'usuario', 'password' => 'senha'), 
                'scope' => array('User.status' => 1)
            )
        ), 
        'authorize' => 'Controller', 
        'loginAction' => array('controller' => 'users', 'action' => 'login'), 
        'loginRedirect' => array('controller' => 'users', 'action' => 'painel'), 
        'logoutRedirect' => array('controller' => 'home', 'action' => 'index'), 
        'authError' => 'Você não tem permissão para acessar.' 
    )
);

 public function isAuthorized($user){
    return true;
}

public $helpers = array('Html', 'Form', 'Session');

}

Two cases:

First:

• User tries to directly access the link /projects/Edit/34 without logging in.
• Cakephp Auth does not allow accessing and redirecting to /login
• After user log in Auth redirects to /projects/Edit/34

In the first case it is ok, understood and working as it should. Now in the second case:

• User enters the homepage of the site /
• User clicks on the "Login" menu and goes to the login/login form
• User logs in and is redirected to the home page /

In this second case, I would not like it to go to the home page but to what is configured in loginRedirect in the case for /panel

Answer 1

With the tips I did the following and what I wanted was solved:

In the AppController.php added an array with the links I want to disable auto redirect.

public $cfg = array(
    'disabledAuthAutoRedirect' => array('/')
);

And in the UsersController.php my method login was like this:

public function login(){

  if ($this->Auth->loggedIn()){
    return $this->redirect($this->Auth->loginRedirect);
  }

  if ($this->request->is('post')){

    if ($this->Auth->login()){

      if ($this->Session->check('Auth.redirect')){

        if (in_array($this->Session->read('Auth.redirect'), $this->cfg['disabledAuthAutoRedirect'])){
          return $this->redirect($this->Auth->loginRedirect);
        }
      }

      return $this->redirect($this->Auth->redirect());
    }

    $this->Session->setFlash('Usuário ou senha inválidos, tente novamente.');

    unset($this->request->data['User']['senha']);
  }
}

Now just add more items in the matrix $cfg \the/

Answer 2

Just do this:

Just summarizing the code below, what you should do is just add this instruction after logging in:

$this->redirect($this->Auth->redirect());

This way login works the ways you expect:

• If the user accesses a page that requires login, was will be redirected to it again after login
• If the user clicks on login (in the frontend for example), and logs in, it will be redirected to the loginRedirect

Tested in version 2.4.3 Stable

Login

/**
 * login method
 *
 * @param 
 * @return void
 */    
public function login(){

  $this->layout = 'login';

  if($this->request->is('post')) {
    if($this->Auth->login()) {
      $this->Session->setFlash(__('Login efetuado com sucesso!'), 'flash/admin/success');
      $this->redirect($this->Auth->redirect());
    } else {
      $this->Session->setFlash(__('Usuário e/ou senha incorretos'), 'flash/admin/error');
      $this->redirect($this->Auth->redirect());
    }
  }

}

Logout

/**
 * logout method
 *
 * @param 
 * @return void
 */
public function logout() {
  $this->Session->setFlash(__('Logout efeutado com sucesso!'), 'flash/admin/success');
  $this->redirect($this->Auth->logout());
}

Appcontroller.php

'Auth' => array(
  'authenticate' => array(
    'Form' => array(
      'fields' => array('username' => 'email')
    )
  ),
  'loginAction' => array('controller' => 'users', 'action' => 'login', 'admin' => false),
  'logoutAction' => array('controller' => 'users', 'action' => 'logout', 'admin' => false),
  'loginRedirect' => '/admin',
  'logoutRedirect' => array('controller' => 'users', 'action' => 'login', 'admin' => false),
  'authError' => 'Acesso não permitido.'
),

---

I hope I’ve helped

Answer 3

I’m not sure, but I think Cake’s behaving the way he’s supposed to - from his point of view. You can try to intercept access to the action in the controller itself and force a redirect.

In the Controller Users:

public function beforeFilter() {
    if($this->action === 'login' && $this->Auth->loggedIn()) {
        $this->redirect(array('controller' => 'users', 'action' => 'painel'));
    }
    parent::beforeFilter();
}