Content of the re-authentication dialog window

[David Barth]

The bug is about finding the right content to present to the user when an online service requests a re-authentication.

This scenario happens with Online Accounts. The user has created an OA account in the system, for example an Ubuntu One account.
The related OAuth token may expire after a while, or the user may change his/her password. At this stage, the online service will require the user to re-authenticate and re-enter his/her password.

When that happens, OA will show a password prompt and we are looking for the right information level to present to the user.

The minimum input required is the username/password pair that will be sent back to the online service.

Additionally we could present the service icon and name, and a short paragraph explaining that this service requests an identity confirmation.

Note: this re-authentication happens at the system level, as opposed to being limited to a particular application. An app may trigger this process because it sends a request to the online service with outdated credentials. But the implication is beyond that particular app, as the re-authentication will allow all authorized apps to continue using the online service in question.

[David Barth (dbarth)]

For reference, iOS uses this rather simple password verification dialog in similar circumstances.

[David Barth (dbarth)]

While we currently have that in the development branch: http://www.mardy.it/archivos/ubuntuone.png

[Matthew Paul Thomas (mpt)]

“UbuntuOne” should be “Ubuntu One”.

Even if the account is used for a variety of things, it’s still reassuring to know why you are being asked about it right at this moment. Something like: “Ubuntu Store needs you to re-enter your Ubuntu One details.” (This is analogous to PolicyKit prompts on the PC: even though authentication persists for a few minutes regardless of purpose, you still get told why it’s being used right now. <https://wiki.ubuntu.com/SecurityPermissions#The_prompt>)

Once there’s an explanation like this, “authentication” in the title wouldn’t add to understanding, so it could be dropped.

Finally, when people create an Ubuntu One account they are asked for their e-mail address, not a “username”.