Core Auth Library

[eluser]Rick Jolly[/eluser]
[quote author="Circuitbomb" date="1250294183"]

I would think that the point of id/username/email combinations would be that they are different, but unique to only the individual member. Of course one of any of those variables could be used to identify a member, but why use one, when one of the other two may have a specific usefulness in any system.

I think that in any user system those three forms need to be present, and are the generic values that need met at the least. How does storing the id update changes for a logged in user while the session is still alive compared to if you used the username? I would think that the session would still need to die or be regenerated in order to see the changes regardless of which one you used.

The only difference I see would be the number of characters used.[/quote]
Maybe I wasn't clear. An auth library can only assume id and password. That id could either be a number, an email address, or a username. The library couldn't assume which one to use, and definitely couldn't assume all three.