common auth API for CI

[h1]Goals[h1] This page is a kind of RFC for building a common API for authentication libraries. Since there is no such core lib, at least we could decide a [b]common interface[/b].

[url=http://codeigniter.com/forums/viewthread/53036/]here is the forum thread[/url]

Feel free to add/edit/delete, but if you do so, please fill in the small [b]notes[/b] field below the edit area.

[h1]structure[/h1]

Quoting benlm, we could start with this structure:

[b]Level 1[/b] would be a library which would have functions like login, logout, register etc. that handle the DB manipulation, sessions, etc. but no views.

[b]Level 2[/b] would have the basic form validation and processing code with defined form parameters and a dead-simple sample view for each (No flash messages, no containers/templates etc.)

[b]Level 3[/b] would have the kitchen sink (views,flash messages, emails sent on password change, etc. with a million configurable parameters)

[h1]components[/h1]

[h2]permissions[/h2]

[h3]user group or level[/h3] permissions levels

[h3]acl[/h3] ...

[h3]'inside code checking'[/h3] ...

[h2]user interface[/h2]

[h3]registration[/h3] config for manual or automatic activation

[h3]custom user profiles[/h3] ...

[h3]remember me[/h3] remember login ID only or password also

[h3]password reset[/h3] ...

[h3]password change[/h3] ...

[h3]retrieve user info[/h3]

[h2]security[/h2]

[h3]captcha[/h3] ...

[h3]track logged in users[/h3] ...

[h3]enable black list / kick out[/h3] ...