Index: openacs-4/packages/acs-core-docs/www/ext-auth-requirements.adp =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/ext-auth-requirements.adp,v diff -u -r1.6.2.5 -r1.6.2.6 --- openacs-4/packages/acs-core-docs/www/ext-auth-requirements.adp 5 Jan 2021 17:33:39 -0000 1.6.2.5 +++ openacs-4/packages/acs-core-docs/www/ext-auth-requirements.adp 3 Sep 2021 09:14:59 -0000 1.6.2.6 @@ -1,5 +1,5 @@ -{/doc/acs-core-docs {ACS Core Documentation}} {External Authentication Requirements} +{/doc/acs-core-docs/ {ACS Core Documentation}} {External Authentication Requirements} External Authentication Requirements External Authentication Requirements

-Vision

People have plenty of usernames and passwords already, we +Vision

People have plenty of usernames and passwords already, we don't want them to have yet another. We want people to be able to log in to OpenACS with the same password they use to log in to any other system.

Besides, administrators have better things to do than create @@ -74,7 +74,7 @@

Requirements

-New API

+New API
@@ -108,9 +108,9 @@ -
FeatureStatusDescription
New API
EXT-AUTH-28AUsername is email switch

Users will log in using a username, an authority, and a password. -The authority is the source for user/password verification. OpenACS -can be an authority itself.

Each user in OpenACS will belong to exactly one authority, which +

Users will log in using a username, an authority, and a +password. The authority is the source for user/password +verification. OpenACS can be an authority itself.

Each user in OpenACS will belong to exactly one authority, which can either be the "local" OpenACS users table, in which case the password column is used, or it can be some external authority, which will be communicated with using some protocol, as @@ -506,7 +506,7 @@ in the sort order.

The relevant code in user-login.tcl would look like this:

 if { ![auth::split_username -username_var username -authority_var authority] } {
-    # bounce back to the form with a message saying that the login wasn't valid.
+    # bounce back to the form with a message saying that the login was not valid. 
     ad_script_abort
 }