Start page defaults to error instead of instructions.

Issue #6 resolved
Donovan Keith created an issue

Before I've done anything, I get a "Username / Password incorrect" error. It would be better if it defaulted to instructions like "Please login with your Cineversity.com username and password to begin using CV-Toolbox".

Also, if possible I'd prefer a more helpful error message like: - Missing username - Missing password - Incorrect username - Incorrect password

So that I can better diagnose what's wrong without having to re-enter both my username and password.

Comments (6)

  1. Donovan Keith reporter

    The other issue with just showing the error is I have no idea if the plugin is communicating with the server. Perhaps a status update as the check takes place like:

    "Contacting server to authenticate credentials..."

  2. Rick Barrett

    The error shouldn't be showing initially - that's definitely a bug.

    If CV can't be contacted, a different error will appear (either "Cineversity Auth Error" followed by HTTP error details or "Timed out contacting Cineversity. Check your internet connection and try again.").

    As far as more helpful errors like Incorrect username / incorrect password - from what I've read it's really bad practice. Telling people the username is valid tells hackers they can just focus on cracking the password with something like a dictionary hack. The security probably isn't a great concern here, but I'm trying to start be more conscious of those things.

  3. Donovan Keith reporter

    Okay, then perhaps make the language more explicit:

    Username and/or Password is incorrect. Please try again.

    Also perhaps a link to Cineversity.com so they can find their account information or reset their password.

    Also, theoretically non-members won't be able to download the plugin, but there's a chance another user will have installed it. So it should explicitly say something like:

    Please login with your Cineversity.com account information. If you don't have a Cineversity.com account, you can create one here.

  4. Donovan Keith reporter

    Okay definitely an improvement. Not critical, but it would be helpful if the cineversity.com text was a clickable link, and/or there was a "Create Account" button that would take you to the Create Account page at Cineversity.com. Also, a "Forgot Username/Password" button that takes you to the forgot username/password page at Cineversity would be good.

  5. Log in to comment