Uploaded image for project: 'Identity Provider'
  1. Identity Provider
  2. IDP-1216

Username/Password login page should show initially entered username instead of transformed username after login errors

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.0.0
    • Labels:
      None

      Description

      If the authn/Password login flow's login page (views/login.vm) is re-displayed after authentication errors (e.g. wrong password), the username field is filled in with the transformed username, in case transformations are enabled (e.g. transforming to lower case, applying regular expression replacements etc.). This might confuse users. Instead, the initially entered username should be filled in.

      Example:

      • User enters "MyUsername" as username
      • Transformations transform the username to "myusername"
      • An authentication error occurs.
      • The login form is displayed again.
      • The username field is filled in with the transformed username, e.g. "myusername".
      • A user might expect "MyUsername".

      Currently, the value stored in UsernamePasswordContext.username is filled in, which is the transformed username. It seems that the initially entered username is not preserved. I propose that the initially entered username is stored in UsernamePasswordContext and used while re-displaying the login page. Possibly, this behavior could be made configurable.

        Attachments

          Activity

            People

            Assignee:
            cantor.2@osu.edu Scott Cantor
            Reporter:
            pdmzksxvevxglxd46rh3hlrjhpi=@https://aai-logon.switch.ch/idp/shibboleth Daniel Lutz
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 30 minutes
                1h 30m