Last modified: 2014-05-27 18:09:34 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T55195, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 53195 - OATH token input should be on a separate page
OATH token input should be on a separate page
Status: PATCH_TO_REVIEW
Product: MediaWiki extensions
Classification: Unclassified
OATHAuth (Other open bugs)
master
All All
: Unprioritized enhancement (vote)
: ---
Assigned To: Ryan Lane
:
Depends on:
Blocks: 53192
  Show dependency treegraph
 
Reported: 2013-08-22 03:21 UTC by Tyler Romeo
Modified: 2014-05-27 18:09 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Tyler Romeo 2013-08-22 03:21:42 UTC
Having the input on the login page makes it confusing to users since most don't even know what two factor authentication is. I'm willing to bet more than one person will try and type their password into it.

Basically there should be a configuration option like in Extension:TwoFactorAuthentication that allows moving the token input to a different page (like how Google, Facebook, etc. does it) and the user only sees it if they have it enabled for their account.

Note that in Extension:TwoFactoryAuthentication, this is done in a ambivalent method that doesn't reveal if you got the password or the token wrong. In other words, if you type an incorrect password, it still takes you to the token page.
Comment 1 Gerrit Notification Bot 2014-05-27 18:09:32 UTC
Change 135597 had a related patch set uploaded by Parent5446:
Move token login to separate page

https://gerrit.wikimedia.org/r/135597

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links