[jifty-devel] authentication plugins

[Agostini yves]

food for thought on authentication plugins

Actually I don't write any line of code, I need help or advice before
beginning ;)

There's 3 main steps :

1. add a 'realm' accessor in CurrentUser
so application can use current_user->realm

2. add a User plugin
in Plugins/Auth/User
with a default model without action or dispatcher,
application can override this model.
We must define this default model.

3. add some credential plugins

in Plugins/Auth/Cred/Ldap
                    /Cas
                    /OpenID
                    /Login

each credential plugin contains
 - web pages
share/web/template/ldaplogin
                  /ldaplogout

 - dispatcher
lib/Jifty/Plugin/Auth/Cred/Ldap/Dispatcher.pm
 - actions
lib/Jifty/Plugin/Auth/Cred/Ldap/Action/Login.pm 
	which set current_user->id, username and realm
 ... Logout.pm
maybe we could use an optional parameter in config.yml to store users in
User plugin. Sometimes we don't need to register users. 


Actual Login plugin is now the more complexe plugin
as people have to confirm their mail address.
So I think to 2 solutions.
1. keep actual model and move confirmed email users to User plugin
2. remove model from login plugin and use only User plugin


What do you think about this ?


-- 
Agostini yves <agostini at univ-metz.fr>