{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet/Identity/issues/1662","repository_url":"https://api.github.com/repos/aspnet/Identity","labels_url":"https://api.github.com/repos/aspnet/Identity/issues/1662/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Identity/issues/1662/comments","events_url":"https://api.github.com/repos/aspnet/Identity/issues/1662/events","html_url":"https://github.com/aspnet/Identity/issues/1662","id":302409088,"number":1662,"title":"UX issues related to Identity","user":{"login":"Eilon","id":202643,"avatar_url":"https://avatars3.githubusercontent.com/u/202643?v=4","gravatar_id":"","url":"https://api.github.com/users/Eilon","html_url":"https://github.com/Eilon","followers_url":"https://api.github.com/users/Eilon/followers","following_url":"https://api.github.com/users/Eilon/following{/other_user}","gists_url":"https://api.github.com/users/Eilon/gists{/gist_id}","starred_url":"https://api.github.com/users/Eilon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Eilon/subscriptions","organizations_url":"https://api.github.com/users/Eilon/orgs","repos_url":"https://api.github.com/users/Eilon/repos","events_url":"https://api.github.com/users/Eilon/events{/privacy}","received_events_url":"https://api.github.com/users/Eilon/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-03-05T18:24:03Z","updated_at":"2018-03-05T18:24:05Z","closed_at":null,"author_association":"OWNER","body":"_From @Eilon on October 24, 2017 21:51_\n\n_From @SteveSandersonMS on May 9, 2016 16:32_\n\nIt's debatable to what extent any of these are \"bugs\", since the template is just a starting point and not meant to be a finished, polished app. But many of them can be fixed easily.\n1. **Default \"External Logins\" UX is confusing**\n   \n   It says \"External logins: 0 [Manage]\". When you click 'Manage', it takes you to a blank page (there's just a heading - no content). What's an end user supposed to do with this? There should at least be some instructions here for the developer, like on other pages.\n2. **Default 'Manage your account' layout is bad**\n   \n   Screenshot:\n   ![screen shot 2016-05-09 at 17 20 10](https://cloud.githubusercontent.com/assets/1101362/15119713/1fffe7a0-160a-11e6-8a0d-37431e1c4c33.png)\n   \n   The text \"Two-Factor Authentic...\" is truncated for no good reason, and its counterpart in the next column isn't correctly vertically aligned with it.\n3. **Change password UI is rough**\n   \n   The heading \"Change Password.\" is inconsistently capitalised (on other pages like \"Log in.\" and \"Forgot your password?\" we don't capitalise the first letter of each word). The subheading, \"Change Password Form\", is completely pointless. Suffixing headings like \"Change Password.\" with period characters is weird and ugly in my option, though that's just a matter of personal preference.\n4. **The account management page is hard to discover**\n   \n   To reach it, you have to click the part of the heading that says \"Hi [username]!\". There's no clear indication that this is how to manage your account.\n5. **When using confirmation URLs, the registration flow provides no indication of what's going on**\n   \n   If you set up account confirmation [as per the docs](http://docs.asp.net/en/latest/security/authentication/accconfirm.html), then when the user registers an account, they just get redirected back to the home page. They are not logged in, and there's no message to say their registration succeeded. It would be nice to display some sort of message like \"Please check your email and click the link we sent to you.\", otherwise the user may think their registration was rejected.\n6. **Login failed message is unhelpful**\n   \n   When you enter the wrong username or password, it says \"Login attempt failed\", without indicating whether it's a bad username or password. I know from reading the code that this is deliberate, but I don't know what sort of benefit it's supposed to provide. An attacker who wants to know whether a given username is registered can easily find out (just try to register a new account with it), so why withhold genuinely useful information from legit users?\n7. **Account-not-confirmed error message makes little sense**\n   \n   If you try to log in before confirming your account, it says \"You must have a confirmed email to log in\". That won't make any sense to normal users. What's a \"confirmed email\"? A better message would be \"Please check your email and click the link we sent to you.\"\n8. **No way to resend confirmation email**\n   \n   If you somehow didn't receive (or accidentally deleted, etc.) your confirmation email, then your account is dead forever, because there's no way to resend it. It's worse still if v1 of your site didn't implement confirmation emails, but v2 does, because then all existing users lose their accounts.\n9. **Set password page when you login with external authentication provider**\n   Delete this line as it looks ugly in the markup: https://github.com/aspnet/Templates/blob/dev/src/Rules/StarterWeb/IndividualAuth/Views/Manage/SetPassword.cshtml#L6\n\n\n_Copied from original issue: aspnet/Templates#551_\n\n_Copied from original issue: aspnet/templating#115_"},"comment":{"url":"https://api.github.com/repos/aspnet/Identity/issues/comments/370514528","html_url":"https://github.com/aspnet/Identity/issues/1662#issuecomment-370514528","issue_url":"https://api.github.com/repos/aspnet/Identity/issues/1662","id":370514528,"user":{"login":"Eilon","id":202643,"avatar_url":"https://avatars3.githubusercontent.com/u/202643?v=4","gravatar_id":"","url":"https://api.github.com/users/Eilon","html_url":"https://github.com/Eilon","followers_url":"https://api.github.com/users/Eilon/followers","following_url":"https://api.github.com/users/Eilon/following{/other_user}","gists_url":"https://api.github.com/users/Eilon/gists{/gist_id}","starred_url":"https://api.github.com/users/Eilon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Eilon/subscriptions","organizations_url":"https://api.github.com/users/Eilon/orgs","repos_url":"https://api.github.com/users/Eilon/repos","events_url":"https://api.github.com/users/Eilon/events{/privacy}","received_events_url":"https://api.github.com/users/Eilon/received_events","type":"User","site_admin":false},"created_at":"2018-03-05T18:24:05Z","updated_at":"2018-03-05T18:24:05Z","author_association":"OWNER","body":"_From @phenning on May 17, 2016 18:42_\n\nI'm working on some of these issues along with some other UI improvements.\n"}}
{"actor":{"display_login":"Eilon"}}