common auth API for CI

[h2]Goals[/h2] This page is a kind of RFC for building a common API for authentication libraries. Since there is no such core lib, at least we could decide a [b]common interface[/b].

[url=http://codeigniter.com/forums/viewthread/53036/]here is the forum thread[/url]

Feel free to add/edit/delete, but if you do so, please fill in the small [b]notes[/b] field below the edit area.

[h2]structure[/h2]

Quoting benlm, we could start with this structure:

[b]Level 1[/b] would be a library which would have functions like login, logout, register etc. that handle the DB manipulation, sessions, etc. but no views.

[b]Level 2[/b] would have the basic form validation and processing code with defined form parameters and a dead-simple sample view for each (No flash messages, no containers/templates etc.)

[b]Level 3[/b] would have the kitchen sink (views,flash messages, emails sent on password change, etc. with a million configurable parameters)

[h2]components[/h2]

[h3]permissions[/h3]

[h4]user group or level[/h4] permissions levels

[h4]acl[/h4] ...

[h4]'inside code checking'[/h4] ...

[h3]user interface[/h3]

[h4]registration[/h4] config for manual or automatic activation

[h4]custom user profiles[/h4] ...

[h4]remember me[/h4] remember login ID only or password also

[h4]password reset[/h4] ...

[h4]password change[/h4] ...

[h4]retrieve user info[/h4]

[h3]security[/h3]

[h4]captcha[/h4] ...

[h4]track logged in users[/h4] ...

[h4]enable black list / kick out[/h4] ...