[geeklog-devtalk] Remote Authentication ;-)

Dirk Haun dirk at haun-online.de
Fri Feb 4 16:35:36 EST 2005


Vinny,


>i.e. mynameismike1234-5678 will be the same as mynameismike1234-8765

>in our database. That would be a BAD THING(TM).


Why exactly? As I said before, once you're past the authentication, it
shouldn't matter how many users there are that have identical usernames
since we identify them by UID.

In other words, the only reason why we have to have unique usernames so
far is because we need to tell them apart when they log in.

Those remotely authenticated users will have to log in with their full
"remote username", but we can then safely store a non-unique username for
them.

One reason why I think we should limit the length of a username to some
sensible value: Have a look at a forum post. The username is to the left
of the text of the post.

Now imagine that username was mynameismikeaswell01234-56789 at blogger


Actually, both Blogger and TypeKey have the concept of a display name. So
you have a username (for login), a display name (to show in posts), and
your real name aka full name. We should probably be using the display
name as the username (but still limit it to a sensible length, IMO).

bye, Dirk


--
http://www.haun-online.de/
http://geeklog.info/




More information about the geeklog-devtalk mailing list