City-of-Bloomington / blossom

A skeleton for PHP web applications
GNU Affero General Public License v3.0
3 stars 0 forks source link

Domain should not know about various authentication schemes #26

Closed inghamn closed 2 years ago

inghamn commented 2 years ago

When adding a user account, the Domain update command checks the authentication method and attempts to do an external identity lookup based on the auth method. This really belongs in the web layer. This is because the Domain layer should not be aware of authentication schemes at all.

The Domain should just take raw scalar properties needed to create the new account. Let the web controller do all the external identity lookups.