I would prefer if they kept the core small. I wouldn’t mind a phoenix_auth dep, but that probably would just be in your dependency tree, only it’d be added with phoenix.new. You do realize that’s how a lot of the functionality exists right now, right?
Though, really, I don’t think the discussion should be about auth in particular. It takes, what, an hour to write it yourself which gives you full control of everything, or even less to bring in a good 3rd party lib.
I would rather have lots of 3rd party libs for a nice community than centralized everything so everyone has to use a bloated castle where no one can find anything.