Activity log for bug #1557062

Date Who What changed Old value New value Message
2016-03-14 17:00:52 Matthew Paul Thomas bug added bug
2016-03-14 17:01:44 Matthew Paul Thomas attachment added screenshot of the problem https://bugs.launchpad.net/canonical-identity-provider/+bug/1557062/+attachment/4599007/+files/1557062-two-factor-auth.png
2016-03-14 17:03:00 Matthew Paul Thomas description 0. Have an SSO account that requires two-factor authentication. 1. On an Ubuntu phone, do something that requires Ubuntu One sign-in, for example buying an app. 2. Enter your e-mail address and password, and choose “Sign in”. What happens: 1. You arrive at a page titled “Sign in to your Ubuntu One account”. 2. You arrive at a page titled “Sign in to your Ubuntu One account”. 3. Immediately below the heading is an error message: “Network error - please retry.” But the SSO system knows this is not true, because the same page asks you for your verification code. If there really had been a network error, it would not have known that this account was one of those that needs a verification code. 4. Unfortunately you usually can’t tell that the error is spurious, because on most phones, the verification code field is hidden behind the on-screen keyboard. This in turn is because the page contains fields labelled “Please type your email:” and “Enter your password:” — which are both also wrong. You do not have to do either of these things, and you are better off not doing them, because you got them right the first time. What should happen: 1. You arrive at a page titled “Sign in to Ubuntu One”. 2. You arrive at a page titled “Two-factor authentication” or similar. 3. “Network error - please retry” should not appear when there is no network error. 4. If your e-mail address and password were correct, the resulting page should not contain e-mail address and password fields. Oddly, none of these problems happen when visiting the equivalent pages on a PC. So on a phone, you would probably be better off viewing the pages designed for a PC than those designed for a phone. 0. Have an SSO account that requires two-factor authentication. 1. On an Ubuntu phone, do something that requires Ubuntu One sign-in, for example buying an app. 2. Enter your e-mail address and password, and choose “Sign in”. What happens: 1. You arrive at a page titled “Sign in to your Ubuntu One account”. 2. You arrive at a page titled “Sign in to your Ubuntu One account”. 3. Immediately below the heading is an error message: “Network error - please retry.” But the SSO system knows this is not true, because the same page asks you for your verification code. If there really had been a network error, it would not have known that this account was one of those that needs a verification code. 4. Unfortunately you usually can’t tell that the error is spurious, because on most phones, the verification code field is hidden behind the on-screen keyboard. This in turn is because the page contains fields labelled “Please type your email:” and “Enter your password:”. Besides pushing the verification code field out of view, these are both also wrong. You do not have to do either of these things, and you are better off not doing them, because you got them right the first time. What should happen: 1. You arrive at a page titled “Sign in to Ubuntu One”. 2. You arrive at a page titled “Two-factor authentication” or similar. 3. “Network error - please retry” should not appear when there is no network error. 4. If your e-mail address and password were correct, the resulting page should not contain e-mail address and password fields. Oddly, none of these problems happen when visiting the equivalent pages on a PC. So on a phone, you would probably be better off viewing the pages designed for a PC than those designed for a phone.
2016-03-14 17:09:01 Matthew Paul Thomas attachment removed screenshot of the problem https://bugs.launchpad.net/canonical-identity-provider/+bug/1557062/+attachment/4599007/+files/1557062-two-factor-auth.png
2016-03-14 17:11:12 Matthew Paul Thomas attachment added screenshot of the problem https://bugs.launchpad.net/canonical-identity-provider/+bug/1557062/+attachment/4599011/+files/1557062-two-factor-auth.png
2016-05-16 15:19:56 Launchpad Janitor ubuntuone-credentials (Ubuntu): status New Confirmed
2016-05-16 15:19:56 dobey affects canonical-identity-provider ubuntuone-credentials (Ubuntu)
2016-05-16 15:21:01 dobey marked as duplicate 1564142