Feature #5647

[Workbench] Log-in on anonymous redirects to google sign-in with no warning; feels like phishing

Added by Nancy Ouyang almost 6 years ago. Updated almost 6 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Radhika Chippada
Category:
Workbench
Target version:
Start date:
04/14/2015
Due date:
% Done:

100%

Estimated time:
(Total: 0.00 h)
Story points:
0.5

Description

tl;dr: Clicking on Login on topnav takes me to google login and this could potentially be very confusing if it's my very first time as anon user

After #5418 there is no way for users to discover the "Safe" login page if the hit the anonymous project/collection/pipeline page.

Right now we manually solve this by giving them a flat-out link to the "Safe" login page in project description.

But you could hit a collection

The only thing to hit is "log-in" and that takes you straight to a google sign-in page, which is super confusing and feels like a phishing attack almost, if you didn't realize Arvados relies on Google Account sign-ins. There's no way to even stumble onto the "Safe" page where it says " You can try it out by logging in with your Google account (for example, from GMail or Google+)."

Possible solutions:

  • Instead of "log-in" say "log-in/sign-up".
  • Redirect topnav "log-in" clicks to "Safe" page
  • Revert #5418, they can always hit the back button, and the "Safe" pages should soon link to a list of public project/collections/pipelines soon anyway -- see screenshot
    https://arvados.org/issues/5370#note-6 [1]

[1] (I hope people haven't forgotten about that part...)

login-dropdown.png (78.1 KB) login-dropdown.png Nancy Ouyang, 04/08/2015 09:03 PM
imgur-signin.png (189 KB) imgur-signin.png Nancy Ouyang, 04/14/2015 03:36 AM
imgur-topnav-anonymous.png (14.5 KB) imgur-topnav-anonymous.png Nancy Ouyang, 04/14/2015 03:36 AM
imgur-topnav-userdropdown.png (251 KB) imgur-topnav-userdropdown.png Nancy Ouyang, 04/14/2015 03:36 AM
imgur-signup.png (180 KB) imgur-signup.png Nancy Ouyang, 04/14/2015 03:36 AM
login-icon-dropdown.png (229 KB) login-icon-dropdown.png Nancy Ouyang, 04/14/2015 04:17 AM
login3.png (119 KB) login3.png Nancy Ouyang, 04/14/2015 04:43 AM

Subtasks

Task #5716: Review branch: 5647-login-dropdownResolvedRadhika Chippada


Related issues

Related to Arvados - Feature #5493: [Workbench] Add "Getting Started" modal inside WorkbenchResolved03/30/2015

Related to Arvados - Bug #5418: [Workbench] Make the brand/root link unclickable when not logged inResolved03/12/2015

Associated revisions

Revision 912464ad
Added by Radhika Chippada almost 6 years ago

closes #5647
Merge branch '5647-login-dropdown'

History

#1 Updated by Nancy Ouyang almost 6 years ago

  • Parent task deleted (#5418)

#2 Updated by Nancy Ouyang almost 6 years ago

Another solution -- edit the text in the "welcome to ARvados" box that says "You are accessing public data." right now, and include link back to "Safe" page or that says "log-in or sign-up with any google account."

This solution only works for collections, however. For projects, the first page you hit is the readme, with no "welcome to arvados" box.

#3 Updated by Ward Vandewege almost 6 years ago

  • Target version changed from 2015-04-01 sprint to 2015-04-29 sprint

#4 Updated by Ward Vandewege almost 6 years ago

  • Tracker changed from Task to Feature
  • Target version changed from 2015-04-29 sprint to Bug Triage

#5 Updated by Ward Vandewege almost 6 years ago

  • Target version changed from Bug Triage to 2015-05-20 sprint

#6 Updated by Tom Clegg almost 6 years ago

Suggestion:
  • Hover-dropdown the login button, with a "Sign up / log in with Google" item.

(Minimize extra clicks and page loads for regulars, without being too surprising for newcomers.)

#7 Updated by Ward Vandewege almost 6 years ago

  • Subject changed from Log-in on anonymous redirects to google sign-in with no warning; feels like phishing to [Workbench] Log-in on anonymous redirects to google sign-in with no warning; feels like phishing

#8 Updated by Tom Clegg almost 6 years ago

  • Story points set to 0.5

#9 Updated by Nancy Ouyang almost 6 years ago

Click for drop-down menu, solution mockup below:

#10 Updated by Nancy Ouyang almost 6 years ago

For future reference, I think imgur.com handles multiple log-in methods well
Sign In

Sign Up

Anonymous topnav

Signed-in topnav

#11 Updated by Radhika Chippada almost 6 years ago

Added a hover dropdown to login link using text suggested in #5647-9 (Note #9), omitting the image after talking to Nancy.

#12 Updated by Nancy Ouyang almost 6 years ago

Radhika, possible choice

#13 Updated by Nancy Ouyang almost 6 years ago

<a href="<%= arvados_api_client.arvados_login_url(return_to: root_url) %>"> <span class="fa fa-lg fa-sign-in"></span><p style="margin-top: -1.35em; padding-left: 1.6em; margin-bottom: 0em; margin-right: 0.5em;">Log-in or register with<br/>any Google account</p></a>

#14 Updated by Radhika Chippada almost 6 years ago

Updated after Nancy viewed and commented back.

#15 Updated by Radhika Chippada almost 6 years ago

  • Category set to Workbench
  • Assigned To set to Radhika Chippada
  • Target version changed from 2015-05-20 sprint to 2015-04-29 sprint

#16 Updated by Radhika Chippada almost 6 years ago

  • Status changed from New to In Progress

#17 Updated by Brett Smith almost 6 years ago

One small comment on the text in 1f6a187: the menu item uses the verb "Log-in." Most of Workbench uses "Log in." I think we should remove the dash for better consistency (even the topnav in this branch says "Log in").

It might be a little more pure to use a Bootstrap popover, but this is small and time-sensitive enough that we can merge this version and revisit it later.

Thanks.

#18 Updated by Radhika Chippada almost 6 years ago

Thanks Brett. Made the text change. And left the hover-dropdown implementation as is to use css-based solution. Since we are not doing it across the workbench, I wanted to keep it simple and avoid using bootstrap-hover-dropdown gem or any other involved things.

#19 Updated by Radhika Chippada almost 6 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 100

Applied in changeset arvados|commit:912464ad82bad38f1ce7984b6d4b19734a9816a9.

#20 Updated by Nancy Ouyang almost 6 years ago

For future, suggest making login drop-down menu show on click instead of hover, to keep consistency with other menus.
The user will have difficulty discovering "?" is a dropdown menu otherwise.

Or in story form: " I just went to cloud.curoverse and spent a few seconds hovering over "login" and then hovering over the "?" menu and wondering why the latter dropdown wasn't showing before remembering I needed to click it"

Edit: ...I recall my where my deep hatred of tooltip menus comes from: watching little kids try to use hover menus on the Arduino IDE. guh. the SIGGRAPH people in 1990 designed better GUIs than are the accepted default now.

https://vimeo.com/61556918 18:20 and 20:49 and 30:03 and 36:37 ... 20:49 and 30:03 people... did you ever test your UI out on kids or elderly people? did you?? -.- 25 years later I am paying for your design choices

(I agree, tooltips are not bad by themselves, but they are easily misused, like any other GUI element.)

Also available in: Atom PDF