A3M - Account Authentication & Authorization Module

[eluser]Peng Kong[/eluser]
erm guys don't debate seriously don't. juz fork a3m and do it the way you like.

just don't use the name a3m since it already represent this

for a3m. it's suppose to be the future where openid/oauth is used.
native signin with username and password is only a fallback for a small minority of users.
in the first place people shouldn't let small sites manage their password... let facebook or google do it man.

so only a small minority of users on a3m will ever see the manage password page
and care about signing in with username + password.
so really this is an unimportant debate.

mass majority of user should use facebook or google.
small minority who use native sign will/should at some point connect their facebook or google.

why even type username+password when you can click one button and be signed in?
tell me what is more simple then clicking one button to sign in?
nothing is more simple! users will use the most simple way cuz their lazy.

i'm against email verification cuz it's troublesome like hell.
it's imo an old way of doing things. you verify cuz you want a "back up" channel to verify the account owner. in the new world openid changes all that, there's no longer a need... that's why i did away with email verifications for a3m.

mobile is the future. tons of pple surf the web using mobile phones. go check the statistics yourself. you think verification is not a hassle? try doing it with ur mobile phone

ok let me correct myself... i'm not saying never verify users email.
im saying don't face users to verify the email as part of the sign up process.

currently native a3m sign up is... enter username, password, email = sign in
currently native a3m sign in process is... enter username and password = sign in
currently a3m sign up process is... click google/facebook/etc, enter username = sign in
currently a3m sign in process is... click google/facebook = sign in

a3m is MINIMALISTIC. doing away with EVERYTHING it can do away with.

let users sign in freaking easily and start using your website.
then later on can slowly collect the 100000 info you need and ask them verify as many emails as you like