Skip to content

Show user OpenID URIs in their profile #1314

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Mar 20, 2017
Merged

Conversation

strk
Copy link
Member

@strk strk commented Mar 17, 2017

So you can tell from a quick look if the users are really who you think
they are (if you know their openid)

@lunny
Copy link
Member

lunny commented Mar 18, 2017

maybe you could send a screenshot?

@tboerger tboerger added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Mar 18, 2017
@lunny lunny added this to the 1.2.0 milestone Mar 18, 2017
@lunny lunny added the type/feature Completely new functionality. Can only be merged if feature freeze is not active. label Mar 18, 2017
@strk
Copy link
Member Author

strk commented Mar 18, 2017

@lunny:

show-openid

@ptman
Copy link
Contributor

ptman commented Mar 18, 2017

looks good

@lunny
Copy link
Member

lunny commented Mar 18, 2017

text align ...

@strk
Copy link
Member Author

strk commented Mar 18, 2017 via email

@lunny
Copy link
Member

lunny commented Mar 18, 2017

@strk
s
h
j
0

@strk
Copy link
Member Author

strk commented Mar 18, 2017 via email

@Fastidious
Copy link

Why is it bold? What happens when the URI is https://this.is.my.openid.provider.of.choice.which.i.use.here/bananas? If the OpenID is to authenticate/login, why is there a need to show it? What is the benefit of it?

@strk
Copy link
Member Author

strk commented Mar 18, 2017 via email

@strk
Copy link
Member Author

strk commented Mar 18, 2017

Made a test with long OpenID (and no-more-bold). Here's what you get:

long-openid

Maybe there's some client-side trick to adapt to screen in javascript ? @geek1011

@Fastidious
Copy link

Also, http://fontawesome.io/icon/openid/. The icon being used now is a blur of rubbish. 😄

@strk
Copy link
Member Author

strk commented Mar 18, 2017

7ebf154 uses font-awesome, and here's a screenshot from another machine (with non-magnified browser content):

fa-openid

@strk
Copy link
Member Author

strk commented Mar 18, 2017

And those links become clikable with f5b8cb6, and here's another screenshot:

clickable-openid

@strk
Copy link
Member Author

strk commented Mar 18, 2017

NOTE: from this other machine (Firefox) the overflow never happens (the first screenshot with overflow was from another browser, dunno now which one it was)

@Fastidious
Copy link

@strk you wrote:

Your OpenID basically shows who you are [...]

I though OpenID was about authentication, not identification. Am I wrong?

@lunny
Copy link
Member

lunny commented Mar 19, 2017

@strk maybe you should give an option to enable to show OpenID in the profile and default is disabled. Security is always the first class Gitea should consider.

@strk
Copy link
Member Author

strk commented Mar 19, 2017

@Fastidious I think OpenID can serve both. By all means authentication is authentication of an identity (your URL). @lunny good point about allowing a flag to make visible/hidden, will work on it (maybe per-openid).
Speaking of which, I went looking how that's done for email and found a bug (#1323)

@strk
Copy link
Member Author

strk commented Mar 19, 2017

Ready, there's now a per-OpenID show/hide toggle, defaulting to hide.

@strk
Copy link
Member Author

strk commented Mar 19, 2017

show-hide-openid

Copy link
Contributor

@pgaskin pgaskin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM except for my comments

@@ -357,6 +357,8 @@ key_name = Key Name
key_content = Content
add_key_success = Your new SSH key '%s' has been added successfully!
delete_key = Delete
show_key = Show
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is kind of unclear what this does, maybe make it "Show on profile"

@@ -357,6 +357,8 @@ key_name = Key Name
key_content = Content
add_key_success = Your new SSH key '%s' has been added successfully!
delete_key = Delete
show_key = Show
hide_key = Hide
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is kind of unclear what this does, maybe make it "Hide on profile"

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See how you like a117987

@pgaskin
Copy link
Contributor

pgaskin commented Mar 19, 2017

Make LGTM work

@tboerger tboerger added lgtm/need 1 This PR needs approval from one additional maintainer to be merged. and removed lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Mar 19, 2017
@strk
Copy link
Member Author

strk commented Mar 19, 2017

Like this, @geek1011 ?

showhide-long

@strk
Copy link
Member Author

strk commented Mar 19, 2017

I've also added unit test now.
Oh, and @Fastidious pointed out he thinks the text should be Hide in profile rather than Hide from profile, what do others think ?

@lunny
Copy link
Member

lunny commented Mar 20, 2017

I have no idea about Hide in profile or Hide from profile, after that, I will give it LGTM.

@tboerger tboerger added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Mar 20, 2017
@pgaskin
Copy link
Contributor

pgaskin commented Mar 20, 2017

@lunny Hide in profile means you are putting it somewhere in the profile, and hide from profile means that you are not including it in the profile. I speak English as my first language.

@bkcsoft
Copy link
Member

bkcsoft commented Mar 20, 2017

Conflicting migrations. Otherwise LGTM

@bkcsoft
Copy link
Member

bkcsoft commented Mar 20, 2017

poof?

@bkcsoft bkcsoft merged commit 9182a35 into go-gitea:master Mar 20, 2017
@strk strk deleted the showOpenID branch March 20, 2017 08:36
@go-gitea go-gitea locked and limited conversation to collaborators Nov 23, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. type/feature Completely new functionality. Can only be merged if feature freeze is not active.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants