Clear admin logged out #122
No reviewers
Labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
KittenSquad/glewlwyd!122
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "clear-admin-logged-out"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR is analogous to #121 (addressed by @babelouest in
919ab43). Its purpose is to clear the admin page navbar and main view if no admin user is logged in.Although I agree #121 was a good idea, I'm not sure having a blank page on the admin app when the user isn't logged in is a good idea, of target have at least some text, an image or a logo or something to appease the eye of the user rather than a cryptic page content. Do you have an idea on how to fill the void? On second thought, I'd also like something similar in the empty profile page too...
@babelouest I agree that a blank card view underneath a navbar makes for a cryptic logout experience. I've been meaning to suggest a prominent login button to fill that void elegantly and functionally (not just decoratively). The button on the far-right corner of the navbar is elegant but way too inconspicuous, especially for the non-admin user. How does this sound to you?
Meanwhile, I'll soon post a PR that improves the recent solution to #121 (profile page). Logging out currently empties only the "Personal data" pane but not the "Schemes" panes, potentially leaving sensitive TOTP tokens and other sensitive data exposed.
That's my problem here, my skills in we design are very low, so all I have is the idea to add something nice in the admin and profile page when logged out, not what, and even less how to do it. That's why I'm asking for help, if you have design skills :)
I've fixed the schemes data leak on logout in this commit:
github.com/babelouest/glewlwyd@b46a9e25d2, thanks for pointing out@babelouest I'm not a designer by any stretch of the imagination but will try to put something together in the coming days.
I haven't checked
b46a9e2out yet but come think, it might expose the sessions list, if the accordion is left open. I've submitted PR that addresses the problem at the root, in case you may find it useful.Closing this for now, thank you. Will return with a proper log out view in due course.
If we can't make something shiny, maybe we can come with something original like a fortune message or riddles...
Pull request closed