Auth

Sigh, I feel compelled to jump into what is turning into a debate!

Shameful it is, that we have not tapped the power of the force for login.
Obvious it is, that the only solution that would work for everyone is one that does not require a framework, but only the mind.

Seriously, there are a lot of lines being drawn in the sand as part of this debate ... "I refuse to consider using X unless it has authentication" vs "I refuse to continue using X if it has authentication".

Is there a middle ground that everyone could play nice using? Are we missing a hook in the framework, that would make it easy to play nice together? I am hearing lots of reasons "for" or "against" X or "authentication", but few suggestions on how to make an authentication "mechanism" that works for everybody.

I will admit that "the force" is not a practical solution, at least not in our lifetimes.
Waiting list for the Jedi Academy, too long it is!

Are there lessons we can learn from other organizations or frameworks (not just PHP) ... pluggable authentication modules? internet authentication service? Java authentication and authorization? identity management?

Is there something that all of us can agree on as being suited to everyone's unique circumstances? Or is the current hook mechanism, and/or the no-standard-authentication-mechanism approach of CodeIgniter the most that we can collectively agree on?

Whoa - I found it!! A single page document describing the ultimate authentication mechanism, that will keep every one of us happy, and that we should all be embracing immediately! Who can argue against this? https://www.owasp.org/index.php/Guide_to_Authentication

Narf - if I submit a PR that implements this, will you let it through?

James Parry
Project Lead