Core Auth Library

[eluser]thody[/eluser]
[quote author="jedd" date="1250299266"]If you can not imagine a system that allows for users without email addresses, then you should not be involved in the design of an abstracted authentication system.[/quote]

With all due respect, I'd love to hear of the last web-based application you signed up for that didn't require you to enter an email address. Practically speaking, it is requirement for 99% of modern web systems.

Regardless, we're looking at a library that has existed for 48 hours, if the option to exclude email address is deemed necessary, we can easily account for that. Open source should be a conversation, not a proclamation. No need to get one's shorts in a knot, just make your case and it will be heard.

Regarding id vs. username vs. email: it's clear that there should be a singular unique key, but it's dually noted that no particular key will prevail as the crowd favourite. The only remaining option is to enable the flexibility for the developer to select the unique key of their choosing. This can easily be done with a few lines of code and presents a minor obstacle.

The underlying point of this post is that very few decisions have been made at this point. If you feel strongly about a certain point, please voice your concern, and we'll all benefit by generating a stronger auth library as a result.