I'm sick of our failure to get registration sorted out, so I've made some steps towards getting at least the password handling bit sorted out. I have:

1. Changed the interface to the classes in TWiki::Users; they now implement the interface (abstract base clase) described in Password.pm
2. Changed TWiki.cfg so you specify the full name of the class (package) you want to use to implement passwords. This simplifies switching implementations in and out, and lets people provide new implementations.
3. Written tests for all implementations, including md5, sha1, crypt and plain htpasswd handling

It should be functionally identical to the old code, just a lot easier to follow and debug, and a lot easier to slot in different implementations.

-- CrawfordCurrie - 04 Apr 2005