This repository is private.
All pages are served over SSL and all pushing and pulling is done over SSH.
No one may fork, clone, or view it unless they are added as a member.
Every repository with this icon (
) is private.
Every repository with this icon (
) is private.
This repository is public.
Anyone may fork, clone, or view it.
Every repository with this icon () is public.
Every repository with this icon (
) is public.
| Description: | no longer maintained here. Please see merb-more |
| Homepage: | |
| Clone URL: | git://github.com/hassox/merb-auth.git |
| name | age | message | |
|---|---|---|---|
 |
.gitignore | Loading commit data...  |
|
| |
README.textile | ||
 |
examples/ | ||
| |
merb-auth-core/ | ||
| |
merb-auth-more/ | ||
| |
slices/ |
MerbAuth – Merb Authentication
An extensible architecture for authentication
- Stupidly Simple
- Speaks fluent HTTP, even the errors
- Pluggable Architecture (so that you can use any authentication algorithms you like)
- Cascading Authentication (if one method fails, another is attempted, then another. When no methods succeed, authentication fails)
Principles
- Sessions are authenticated, not users.
- Just because one method of authentication fails doesn’t mean the session, can’t be authenticated another way. This is especially true if your application has an external API as well as a public interface.
- HTTP has built-in Errors which every web-browser (should) know how to speak. If you’re application speaks in HTTP Verbs (GET, POST, PUT, DELETE), it should also serve the correct HTTP Errors when things go wrong.
