adapt_authoring icon indicating copy to clipboard operation
adapt_authoring copied to clipboard

Password reveal

Open Link2Twenty opened this issue 5 years ago • 16 comments

I've added a password reveal to the main login page using the material design SVGs https://material.io/tools/icons/?style=baseline

#2219

password_reveal

Link2Twenty avatar Jul 10 '19 13:07 Link2Twenty

OK, I've moved it over to Font Awesome and made sure it works in IE and Edge.

password_reveal_fa

I'll do another PR for the user profile icon.

Link2Twenty avatar Jul 10 '19 14:07 Link2Twenty

@Link2Twenty Fab thanks, I'd be happy for the user profile icon change to be part of this PR if you'd like as it makes more sense alongside these changes and is small :)

canstudios-nicolaw avatar Jul 10 '19 15:07 canstudios-nicolaw

@canstudios-nicolaw sorry, I've only just noticed your response I've made another PR #2384

Link2Twenty avatar Jul 10 '19 15:07 Link2Twenty

@Link2Twenty It looks like both PRs contain very similar Less. It would be good if that could be put in one place that was used by both the login and the user profile. I'm not sure off the top of my head where that would be but can have a look tomorrow.

canstudios-nicolaw avatar Jul 10 '19 15:07 canstudios-nicolaw

I'd guess adapt_authoring/frontend/src/core/less/forms.less

We'd have to change the templates so the styles could be a little more generic but that's fine.

Link2Twenty avatar Jul 11 '19 07:07 Link2Twenty

I was just having a look and thinking about frontend/src/modules/user/less/ and having a new file called "sharedUserStyles.less" or similar. Since both of the less files are in that directory anyway. I think I'd be equally happy for it to go in forms.less

canstudios-nicolaw avatar Jul 11 '19 07:07 canstudios-nicolaw

The third location in the original Issue is adapt_authoring/frontend/src/modules/userManagement/ so outside of the user directory might be best, if we want to use the same styles again, of course.

Link2Twenty avatar Jul 11 '19 08:07 Link2Twenty

I think we're there 🙂

Link2Twenty avatar Jul 11 '19 09:07 Link2Twenty

Hi guys, sorry to jump onto this late.

The original issue (#2219) asks for a password reveal in places where the password is being saved to the database, i.e. on user creation or change. This PR adds it to the login screen – this isn't functionality I've noticed on any of the big websites. Have we general consensus for this to be added here?

tomgreenfield avatar Jul 11 '19 09:07 tomgreenfield

@tomgreenfield Google login forms (like Gmail) have a way to reveal passwords, though I can't find anything about it in the material spec.

Also, as @canstudios-nicolaw said Edge and IE add the reveal functionality themselves.

Link2Twenty avatar Jul 11 '19 09:07 Link2Twenty

@tomgreenfield @Link2Twenty

I think Tom makes a good point, and I think it is best to discuss issues before working on them to avoid this sort of thing, and we should ask ourselves if we want changes before putting them in. Generally our better defined/higher priority issues are on the bugpatch milestone.

That being said, I know we have implemented this sort of thing before on some of our products, and IE/Edge do this as standard. I would be happy for it to go in. Tom do you feel strongly otherwise?

canstudios-nicolaw avatar Jul 11 '19 09:07 canstudios-nicolaw

@canstudios-nicolaw, you've caught my drift. Was mainly opening the discussion to avoid feature creep and/or security concerns.

I read somewhere a while back that companies tend to avoid toggles on their web-based login forms due to users being able to exploit password managers' auto-fill functionality to reveal plain text passwords. No strong feelings either way from me though.

tomgreenfield avatar Jul 11 '19 10:07 tomgreenfield

I am happy for this to go in. I will give it a proper test/approve as soon as 0.9.0 is out

canstudios-nicolaw avatar Jul 11 '19 12:07 canstudios-nicolaw

I think this is a great feature, shouldn't we have this feature in our latest release?

memeteli avatar Oct 04 '21 15:10 memeteli

Is it worth me keeping these pull requests open or shall I close them?

Link2Twenty avatar Aug 02 '22 10:08 Link2Twenty

@Link2Twenty leave this for now, and I'll bring up in the weekly call :)

taylortom avatar Sep 07 '22 12:09 taylortom