CakePHP 2.x 系で会員認証 / ログイン関係の機能を AuthComponent を使って構築する方法

Configure::write('Security', array(
    'level' => 'high',
    'salt' => 'qwertyuiopasdfghjklzxcvbnm',
    'cipherSeed' => '12345678900987654321'
));
Configure::write('Session', array(
    'defaults' => 'database',
    'cookie' => 'SID',
    'timeout' => 259200,
    'ini' => Array(
        'session.cookie_lifetime' => 2580000,
        'session.gc_maxlifetime' => 2580000,
        'session.gc_probability' => 1,
        'session.gc_divisor' => 100
    )
));

CREATE TABLE IF NOT EXISTS `cake_sessions` (
  `id` varchar(255) NOT NULL DEFAULT '',
  `data` text NOT NULL,
  `expires` int(11) DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

CREATE TABLE IF NOT EXISTS `users` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `email` varchar(120) DEFAULT NULL,
  `password` varchar(50) DEFAULT NULL,
  `role` varchar(20) NOT NULL,
  `created` datetime DEFAULT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=utf8;

class AdminController extends AppController
{
    public
        $uses = Array('User'),
        $components = Array(
            'Session',
            'Auth' => Array(
                'loginRedirect' => Array('controller'  => 'admin', 'action' => 'index'),
                'logoutRedirect' => Array('controller' => 'admin', 'action' => 'login'),
                'loginAction' => Array('controller' => 'admin', 'action' => 'login'),
                'authenticate' => Array('Form' => Array('fields' => Array('username' => 'email')))
            )
        );
 
    public function beforeFilter()
    {
        parent::beforeFilter();
        $this->layout = 'admin';
        $this->Auth->allow('add', 'login');
    }
 
    public function index()
    {
        $this->set('title_for_layout', 'ダッシュボード | 管理画面');
    }
 
    public function login() {
        if($this->request->is('post')) {
            if($this->Auth->login()) {
                return $this->redirect($this->Auth->redirect());
            } else {
                $this->Session->setFlash(__('Username or password is incorrect'), 'default', array(), 'auth');
            }
        }
    }
 
    public function logout($id = null)
    {
        $this->redirect($this->Auth->logout());
    }
 
    public function add() {
        if($this->request->is('post')) {
            $this->User->create();
            if ($this->User->save($this->request->data)) {
                $this->Session->setFlash(__('The user has been saved'));
                $this->redirect(array('action' => 'index'));
            } else {
                $this->Session->setFlash(__('The user could not be saved. Please, try again.'));
            }
        }
    }
}

class User extends AppModel {
 
    public $name = 'User';
    public $validate = Array(
        'email' => Array(
            'required' => Array(
                'rule' => Array('notEmpty'),
                'message' => 'メールアドレスを入力してください。'
            )
        ),
        'password' => Array(
            'required' => Array(
                'rule' => Array('notEmpty'),
                'message' => 'パスワードを入力してください。'
            )
        ),
        'role' => Array(
            'valid' => Array(
                'rule' => Array('inList', Array('admin', 'staff', 'author')),
                'message' => '権限を選択してください。',
                'allowEmpty' => false
            )
        )
    );
 
    public function beforeSave() {
        if (isset($this->data[$this->alias]['password'])) {
            $this->data[$this->alias]['password'] = AuthComponent::password($this->data[$this->alias]['password']);
        }
        return true;
    }
}

<div class="login form">
    <?php echo $this->Session->flash('auth'); ?>
    <?php echo $this->Form->create('User', Array('url' => '/admin/login')); ?>
    <table>
    	<tr>
    		<th>メールアドレス</th>
            <td><?php echo $this->Form->input('email', Array('label' => false)); ?></td>
    	</tr>
    	<tr>
    		<th>パスワード</th>
            <td><?php echo $this->Form->input('password', Array('label' => false)); ?></td>
    	</tr>
    </table>
    <?php echo $this->Form->end('ログイン'); ?>
</div>

<div class="admin form">
    <?php
        echo $this->Form->create('User', Array('url' => '/admin/add'));
        echo $this->Form->input('email');
        echo $this->Form->input('password');
        echo $this->Form->input('role', array(
            'options' => array('admin' => '管理者', 'staff' => 'スタッフ', 'customer' => 'お客様')
        ));
        echo $this->Form->end('アカウントを作成する');
    ?>
</div>