If the extra data hash contains a key auto_validate, the value of that key will be used as the UID, and authenticate will not call your validate_user callback
But the code in authenticate calls the validate_user callback regardless, and ignores its result value if auto_validate is present.
If this is by design, then the documentation should be corrected. Otherwise, the code in authenticate can be simplified.
The documentation states that
But the code in
authenticate
calls thevalidate_user
callback regardless, and ignores its result value ifauto_validate
is present.If this is by design, then the documentation should be corrected. Otherwise, the code in
authenticate
can be simplified.