pecl:web:todo:svn_auth
Svn auth (through main.php.net)
login
- users can log in with their svn credentials.
- if the given username is in the db, but it is missing from main.php.net, we error out and tell him/her to contact pecl-dev@php.net for help.
- we create the user record in the db if neccessary on the first login. we pull the user info(name, email) from main.php.net.
- the 'PEAR_USER' and 'PEAR_PW' cookies are removed and those checks are replaced, we only use the session cookie for user authentication.
- the password field from the user table should be dropped.
account request
- SVN account request isn't optional anymore.
- we first check the username/password against main.php.net, if thats succesful, we error out and tell the user to simply log in.
- if the given username exists on the main.php.net, but the password isn't right, we error out and tell the user that chose a different username or try to login or use the http://main.php.net/forgot.php to change his password.
- if it's a new user, we send the svn account request and we create a normal user record in the db, not a temp, as the login will only work if the svn account is approved.
pecl/web/todo/svn_auth.txt · Last modified: 2021/04/06 08:04 by sergey