Easily extensible auth library

[eluser]jpi[/eluser]

What does adding/deleting of users have to do with authentication?

You are right. But still, it seems do me that it could be considered as a part of authentication (in a way...)

And those out there, that don’t need ACL should just not use the ACL features of the libray.

It seems ok but if you mix a bit ACL and auth, your script will be more complex to understand, correct (if there are bugs), and extends. Plus, I doubt you will be able to implements ACL with other storage than databases. I truly believe "weak coupling" (i dont know if that makes sens in english..) is a good point.

@Storage : exactly what you said.

Finally, I support you with your intention to make another auth lib, but I believe that in the end, it will look very similar to Zend_Auth, so why don't you just use it ?