| Osnard | |
| Mar 13 2019, 2:09 PM |
| F29990060: Screenshot 2019-08-07 at 10.10.15.png | |
| Aug 7 2019, 5:10 PM |
| F29990055: Screenshot 2019-08-07 at 10.08.49.png | |
| Aug 7 2019, 5:09 PM |
| F29990056: Screenshot 2019-08-07 at 10.06.29.png | |
| Aug 7 2019, 5:09 PM |
| F29990038: Screenshot 2019-08-07 at 10.02.26.png | |
| Aug 7 2019, 5:02 PM |
| F29990033: Screenshot 2019-08-07 at 09.53.41.png | |
| Aug 7 2019, 5:01 PM |
Objective: The user experience using WebAuthn is smooth and seamless. Also, users can
enable and disable the method.
The following functions are the result of this project phase
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| UI upgrade | mediawiki/extensions/OATHAuth | master | +280 -130 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Reedy | T227242 Deploy WebAuthn to Wikimedia Wikis | |||
| Resolved | ItSpiderman | T100373 WebAuthn (U2F) integration for Extension:OATHAuth | |||
| Resolved | ItSpiderman | T218214 SO878 Step 3: Finalize settings and user experience | |||
| Resolved | CCicalese_WMF | T226058 oathauth-ui-error-page-no-module need refining | |||
| Resolved | ItSpiderman | T226056 Describe what different auth methods are | |||
| Resolved | PRODUCTION ERROR | ItSpiderman | T231786 Error trying to enable 2FA on testwiki: "Call to a member function getSecret() on a non-object (array)" | ||
| Resolved | ItSpiderman | T232008 Ability to overwrite 2FA method without providing/re-auth using existing secondary authentication method |
Change 527089 had a related patch set uploaded (by ItSpiderman; owner: ItSpiderman):
[mediawiki/extensions/OATHAuth@master] UI upgrade
^ to show the re-introduction of the empty "available" section. And below is how it currently is in master
As mentioned in T226056 too... I wonder if we should have some sort of non technical/"laymans" description?
And I guess in the totp case... Some sort of mobile app suggestion/recommendations?
FB/Google examples:
One minor niggle, but I'm guesing it's due to the existence of the button and the text... Is that "TOTP (one-time token)" is slightly higher than "Two-factor authentication:"
Not going to block the merge on it though
Change 527089 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] UI upgrade
I like this improvement a lot ! The messages do indeed still need some work.
I was looking at the screenshot of FB by Reedy and was wondering if we too should consider making the recovery codes a separate method ? Might make more sense.
Patches welcome ;)
Could be an interesting thing to do. Because the WebAuthn method technically has no recovery method... Beyond allowing multiple devices/keys
Seems worth filing it as a separate task, as it's possibly out of scope for this