Provide minimal desktop theme for SSO

[Matthew Paul Thomas]

Binary package hint: software-center

software-center trunk r1116, Ubuntu Maverick

1. Navigate to Fluendo DVD Player, and choose "Buy".
2. In the sign-on screen that appears, click a link, e.g. "Terms of Service".
3. Try to return to the sign-on screen.

What happens: You can't.

What should happen: either
* there should not be any links on the embedded version of the sign-on screen at all (preferred); or
* it should be possible to get from any linked screen back to the sign-on screen somehow.

[Stuart Metcalfe (stuartmetcalfe)]

We should be able to use the same desktop light styled theme as the payment service. This should not contain links to external pages. It should also not provide a language picker as this will be embedded into desktop apps and pick up the user's default automatically.

[Anthony Lenton (elachuni)]

The linked branch implements a basic embedded theme.

There's a new context processor that inspects the trust_root during OpenID transactions and lets the templates know if they should behave as embedded. You currently just have one setting to select one trust root you'd like to show as embedded. A better way to do this would be to add a flag in OpenIDRPConfig to decide if each RP should be treated as embedded or not.

The embedded theme itself is based on jblount's mobile style sheet, with a couple of changes:
 - External links that were easily removed were removed.
 - All remaining external links are added a target="_blank" via javascript

[David Owen (dsowen)]

To test, use the built-in test consumer. This will enable embedded mode on SSO proper.

[David Owen (dsowen)]

Test addendum:

In embedded mode, the site will be styled a little differently. First off, it should support a narrower screen size. I set my browser window to 480px to test it, for example. Second, you should not be able to navigate yourself into a corner by only clicking on the screen (i.e. don't user your browsers forward/backward buttons).

[Anthony Lenton (elachuni)]

Notes to QA:

This bug requires particular OpenID transactions to happen with a slightly different theme. You'll recognize this new theme because it should work better on narrow screens (down to 640px wide) and have considerably less external links to reduce the ways of abandoning the SSO site while running inside an embedded browser.

At the moment the way to select which OpenID transactions get the embedded theme is via a setting, that tells SSO to use the embedded theme for all transactions for a particular RP.

To test:
1) Check that the EMBEDDED_TRUST_ROOT setting is set to the test consumer's trust root. Logging in with the test consumer should then show you the embedded theme. If you have another consumer available, verify that it doesn't use the embedded theme.
2) Check that EMBEDDED_TRUST_ROOT setting is set to anything else. Logging in with the test consumer should now use the standard theme.

[Dave Morley (davmor2)]

This is currently disabled on production and needs to be revisited after the new SCA and pay hit production.