Core Auth Library

[eluser]thody[/eluser]
[quote author="Pascal Kriete" date="1250118336"]There's more to writing a library like this than just writing a bunch of code. The code for an auth library is quite simple, which is why there are so many of them. It gets a bit more difficult as you move into permissions and making it flexible enough a wide variety of applications (from simple one person login, to a full fledged cms with layered permissions).

However at that point it no longer qualifies as a "simple" library in my book.[/quote]

I agree, layering in ACL would remove it from the simple library category. Further to that, when it comes to more advanced permissions, we're no longer talking about common functionality, as permission layers are very app specific. What I am proposing is that there be a library to handle core auth functionality (User create/read/update/delete/login/logout), which is the basis of any of these custom implementations.

If the purpose of CI is to provide a rich set of libraries for commonly needed tasks, I think this proposal is well-founded.

[quote author="Pascal Kriete" date="1250118336"]The larger portion is that any addition to the core needs to be tested, documented, and subsequently supported. This takes away from resources that could otherwise be used to improve the existing code base.[/quote]

This is true of any additional code, such as the new Cart library, so I don't really see how it factors in.