Re: First LiveUser package release is near

Am Mon, 30 Sep 2002 10:44:57 +0200 schrieb Bertrand Mansion <bmansion@mamasam.com>: > Method userNotActive could be clearer if called isActive or isUserActive > just like the other isLoggedIn method. You´re right, I´ll look into this. > Also for the 'remember me' feature, it might be better, in the complex mode > maybe, to store a 'login:password' md5 hash (or just a unique id) in the > cookie and to check on every call if this hash can be found in the db. This > is because it's easier to guess someone's login (for instance mw21st) than a > 32 chars md5 hash. That is surely a good idea. However, I guess we´ll have to implement some kind of downgrading mechanism to allow other auth container classes to handle things differently (or not to offer this feature at all). We´ve had a big discussion about something like this as we also need to have a unique user identifier to sync users from auth containers with permission data in perm containers. This user identifier can´t simply be the primary key from the auth container, as there is no guarantee that there will ever be such a thing (think about SOAP or LDAP containers - no primary keys there). So we need to reliably generate an identifier that we don´t need to store in the auth container, as we also have no guarantee that we will be able to add a new field for this (think about external authentication services like MS Passport - I guess it would be difficult to convince Microsoft to add a new datafield to make Passport Liveuser-compatible :-)). Similarly we have no guarantee that we can store the cookie hash in the auth container, which is why we´ll need some kind of downgrading mechanism. I guess this will come together with PEAR error handling which is due next month. Regards, Markus -- *21st Media* | Consulting, Konzeption, Produktion für die Bereiche: Markus Wolff | Internet, Intranet, eCommerce, Content Management, Hamburg,Germany | Softwareentwicklung, 3D-Animation, Videostreaming http://21st.de | Tel. [+49](0)40/6887949-0, Fax: [+49](0)40/6887949-1