Best Auth library?

[eluser]Jelmer[/eluser]

I’ve been looking through some of the options and most of the them look to be not so well coded and seem a bit lacking features wise. Hrmm.

That's actually a combination you're not very likely to find: for me most libraries which are very well coded and with a lot of features don't really do it the way I want them to. And also take approaches that would require me to rewrite lots of their code in order to work with my application(s).

I've used CL_Auth for a time and switched to FreakAuth_light because I preferred to set the required user level at the top of each controller as oposed to creating a database entry for every controller/usergroup combination. In the end though, I needed more flexibility and there was no way around having to write one myself.

So I took SimpleSecureLogin as a starting point yesterday, not much is left by now but for the most trivial stuff. By now I've added user groups, 2 additional levels of encryption and changed much of the way the logged-in check works and the login itself works.

This is the approach I'd recommend, because if you want your auth library to intergrate well with your application you'll either have to write it yourself or change about half the code of someone elses. The SimpleLogin library seems to be the only attempt at making something of general use without too much interpretation to make adapting it completely to your own application a lot of work.

And writing your own stuff has the additional upside of knowing every line of code very well, which makes changing something a lot easier. Which is an upside for something as important to most applications as an auth library.