Description: ------------ When $this->_auth_obj->setAuthData() is called from within a custom Auth_Container class by a parent Auth_HTTP class the authData is stored under the session variable '_authsession' during authentication. After authentication the internal session variable is moved to '_authttp'.md5(realm) but the previously stored session data is not copied to the new session variable. Reproduce code: --------------- http://www.theduckets.com/auth_http_container_bug.tar.gz Expected result: ---------------- test1 and test2 were inserted into authData during authentication. they are no longer accessible. test1 = test data1 test2 = test data2 Adding test3 and test2 to the authData. Test3 and test4 are still accessible. test3 = test data3 test4 = test data4 Actual result: -------------- test1 and test2 were inserted into authData during authentication. they are no longer accessible. test1 = test2 = Adding test3 and test2 to the authData. Test3 and test4 are still accessible. test3 = test data3 test4 = test data4

You can workaround this by by inserting the follow line in Auth/HTTP.php at line 183 182:$this->Auth($storageDriver, $options); 183:$this->storage->_auth_obj->_sessionName =& $this->_sessionName; 184:}

This problem also affects scripts that uses DB as container. None of my PHP applications that uses AUTH_HTTP works anymore after updating from Auth_HTTP 2.0 to 2.1.4. The data of the additional fields that I want returned from getAuthData is gone. After testing different CVS versions betveen release 2.0 and 2.1.4, the last CVS version that this worked was 1.13. In version 1.14, there was new code in assignData that changes the session name. Since DB uses $this->storage->_auth_obj->_sessionName to find the session name to store the data in, it looks like you have to do as the second comment describes: "Set $this->storage->_auth_obj->_sessionName" too.