Matthew Ratzloff wrote:
Like Zend_Auth_Chain? That would be useful. Users add adapters, then
call authenticate().
Yeah it would be quite useful.
It would be interesting to see how the system could help with the
following scenario.
The "application" has a users table with an id column. Every user,
regardless of auth method, needs to have a user_id.
Say I authenticate myself via OpenID, I still need a user_id in the
application.
Perhaps the Zend_Auth_Chain object could have a structure for ensuring a
local user row (and thus a user_id) is created when a user authenticates?
I'd suggest a table structure something like:
Users: id | whatever else
User_Auth: id | mech | detail
Users.id is auto-incrementing, and for every user that exists, there is
one or more User_Auth rows (remember that it should be possible for the
same user to authenticate via more than one system).
The "mech" could default to the class name of the actual authadapter
used, and the "detail" would be e.g. a URI in the case of open id or
ldap etc.
If the chain loader can automate the population of these tables then
that would make it work very nicely IMO.
Col
--
Colin Guthrie
gmane(at)colin.guthr.ie
http://colin.guthr.ie/
Day Job:
Tribalogic Limited [http://www.tribalogic.net/]
Open Source:
Mandriva Linux Contributor [http://www.mandriva.com/]
PulseAudio Hacker [http://www.pulseaudio.org/]
Trac Hacker [http://trac.edgewall.org/]