The various wiki projects (meta, wiki etc.) verify a user when he tries to change his email address by asking him to enter his password. The page similar to the login page is used for this. It does look nice except for one place, the "Keep me logged in" check box. It shouldn't be shown when a logged-in user is being verified as it seems meaning less in that context. It's better to avoid showing the check box altogether when the user is logged in.
Screen shot
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T197160 All security-sensitive MediaWiki functionality should require elevated security | |||
| Open | None | T197153 Make some providers optional for reauthentication | |||
| Open | None | T168557 "Keep me logged in" check box shouldn't be shown when a logged-in user is being verified |
Change 372762 had a related patch set uploaded (by Florianschmidtwelzow; owner: Florianschmidtwelzow):
[mediawiki/core@master] SpecialUserLogin: Hide rememberMe checkbox when re-authenticating
Change 472749 had a related patch set uploaded (by Gergő Tisza; owner: Gergő Tisza):
[mediawiki/core@master] Do not show "remember me" checkbox on security reauthentication
Change 372762 abandoned by Florianschmidtwelzow:
[mediawiki/core@master] SpecialUserLogin: Hide rememberMe checkbox when re-authenticating
Reason: