2.0 Auth library recommendations / session takeover

[eluser]wwwald[/eluser]
[quote author="Aken" date="1303883807"]Yeah, basically the two sites will have to share a cookie. Although I personally would not recommend a setup like that. It's a privacy issue - users will be concerned when they visit a separate website and you already have their information.[/quote]

The details of the setup still have to be figured out, but there's a good chance we'll be sharing domains & servers, so that would solve the privacy concerns.

For now, the other site uses plain PHP sessions for auth. I suppose that's not a bad starting point to start adjusting Tank Auth to pick up those sessions.

In any case, I'll probably reappear here for more detailed help once I dive into the session code :-)

Thanks a lot for the help,
wwwald