[_825] pam_interactive: record TODOs marking differences in Python vs C++ client plugin

Author: d-w-moore

irods/auth/pam_interactive.py

@@ -72,12 +72,17 @@ def auth_client_start(self, request):
         resp['user_name'] = self.conn.account.proxy_user
         resp['zone_name'] = self.conn.account.proxy_zone
 
+        #TODO check handling of FORCE_PASSWORD_PROMPT -
+        # This is close to what the C++ plugin (client-side) does
         # If not forcing a prompt, check for existing credentials (.irodsA) to attempt native auth directly
         if not resp.get(FORCE_PASSWORD_PROMPT, False):
             if self.conn.account.password and self.conn.account.derived_auth_file:
                 resp[__NEXT_OPERATION__] = PERFORM_NATIVE_AUTH
                 return resp
 
+        # TODO
+        # iRODS4j removes the passworda property from the response object
+
         # Otherwise, begin the full interactive flow
         resp[__NEXT_OPERATION__] = AUTH_CLIENT_AUTH_REQUEST
         return resp
@@ -199,6 +204,7 @@ def authenticated(self, request):
         if not self.depot:
             raise RuntimeError("auth storage object was either not set, or allowed to expire prematurely.")
 
+        # TODO: review (iRODS4j doesn't do this).
         if request.get(STORE_PASSWORD_IN_MEMORY):
             self.depot.use_client_auth_file(None)