[osflash] Open source user management / subscription?

[Zárate]

Hi there,

Have you seen Open ID already?

http://openid.net/

An open and decentralized identity system, designed "not to crumble if
one company turns evil or goes out of business"

Cheers,

Juan

On Wed, Mar 5, 2008 at 1:24 PM, Marc Hughes <osflash at wpidalamar.com> wrote:
> Blogs, CMS, bulletin boards, chat systems, social networks, most
>  RIA's... they all have something in common.  Users.  Users need to
>  sign up and log in.  Why is it that each system, even open source
>  systems, end up implementing their own  User management system?  I bet
>  there's several million login form implementations out there by now,
>  that's stupid.
>
>  So, does anyone know of any open source user management / subscription systems?
>
>  In general I'd want things like
>
>  - Allowing users to sign up (email verification, catpcha support,
>  configurable list of user details to require)
>  - Assign various access levels (or attributes?) to users.
>  - Allow users to log in / log out
>  - Detect multiple failed logins for a user or from a source host with
>  configurable temporary lockouts
>  - Provide a simple API to use in applications that build upon it to
>  get login status & access level (preferably language-agnostic)
>  - Mechanism for retrieval of forgotten passwords (email? security
>  question(s)?, combination?)
>  - Provide a simple html based UI to handle all of these functions
>  (including administrative functions like approving, disabling,
>  changing access, etc.).
>  - Provide an XML-RPC or AMF based interface to perform all of the
>  functions so it's easily customizable by application that builds upon
>  it.
>  - Mechanism to include paid subscriptions
>
>  There's a ton of full-featured CMS systems out there like drupal,
>  postnuke, etc.  But I'd really like a very basic user management
>  system that was designed to be built upon.  I fear starting with one
>  of those all-encompassing packages would result in a lot of unneeded
>  complexity, and a giant security risk in code that I don't even need.
>
>  Weird thing is I've needed this for a personal project for a while
>  now, and my day-job just asked me the exact same question yesterday. I
>  have to believe there's a huge demand for it.
>
>  Thanks for any info,
>  -Marc
>
>  p.s. much of this email copied from blog, sorry it the tone sounds weird.
>
>  _______________________________________________
>  osflash mailing list
>  osflash at osflash.org
>  http://osflash.org/mailman/listinfo/osflash_osflash.org
>



-- 
Juan Delgado - Zárate
http://zarate.tv
http://dandolachapa.com
http://loqueyosede.com