which validates first with the authenticate() method from LoginForm.php and then calles login().
But I can’t see a way to get to lines 72/73. Not even with provoking validation errors like “Field must not be empty” etc.
public function login()
{
if ($this->_identity === null)
{
// HOW WOULD I GET HERE?
$this->_identity = new UserIdentity($this->username, $this->password);
[...]
I am taking a guess here, but I suspect that part would be reached when automatically logging in (when a cookie is set and you are opening a new session). After all, when automatically logging in, you don’t have a login form to validate.