September 2012 - kune-commits - lists.ourproject.org

[Kune - Feature #131] Secure register/sign in and autologin
by Redmine Comunes 03 Sep '12

03 Sep '12

Issue #131 has been updated by Vicente J. Ruiz Jurado. Resolution set to fixed This was fixed several months ago. ---------------------------------------- Feature #131: Secure register/sign in and autologin http://redmine.ourproject.org/issues/131#change-390 * Author: Vicente J. Ruiz Jurado * Status: New * Priority: High * Assignee: Vicente J. Ruiz Jurado * Category: Common * Target version: * Resolution: fixed ---------------------------------------- The goal: - Register accounts - Sign in with user/pass - and auto login with a cookie for some days in both Kune+Wave+XMPP Also we have to permit xmpp auth to non kune/emite xmpp clients. The current status: Kune/WIAB register users with digest SHA-512 + salt auth plaintext user + pass (see [[WaveClientSimpleAuthenticator]]). Aka: We should use https Autologin is done via a hash in a cookie. A proposed non secure solution (server specific) is to implement a custom: http://www.igniterealtime.org/builds/openfire/docs/latest/documentation/jav… http://community.igniterealtime.org/thread/35365 and for autologin, try to auth to xmpp with user+cookie-hash as a second option using: http://www.igniterealtime.org/builds/openfire/docs/latest/documentation/jav… This permits normal xmpp use (with external and emite client) and autologin for xmpp also in kune. Problem: we need to store plain passwords (even with a SASL client I think). See: http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/java/org/jivesof… http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/java/org/jivesof… http://java-monitor.com/forum/showthread.php?t=453 This is not secure: "But hey, management wants encrypted passwords in the database, management gets encrypted passwords in the database. :-)" TODO: study a way to make a compatible secure plain+digest [[AuthProvider]] compatible with our SHA-512 stored pass... Work in progress -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account

1 0

[Kune - Feature #169] (Closed) Sign-in username is confusing: force lowercase & more
by Redmine Comunes 03 Sep '12

03 Sep '12

Issue #169 has been updated by Samer -. Status changed from Resolved to Closed % Done changed from 80 to 100 Resolution set to fixed ---------------------------------------- Feature #169: Sign-in username is confusing: force lowercase & more http://redmine.ourproject.org/issues/169#change-389 * Author: Anonymous * Status: Closed * Priority: Normal * Assignee: Samer - * Category: Group space * Target version: * Resolution: fixed ---------------------------------------- After several tests with people, both Dario and Sara had problems when creating the username. Both were insisting to use a name with capital letters, even though they were reading the (!) error. A similar problem occurred when creating a group. I don't know how to solve this, but I have three suggestions. I would apply the three, but probably the third takes more time. Suggestion 1: * ask "Name" before "Username" in user creation. It's more intuitive. * ask "Long name" before "Short name" in group creation Suggestion 2: * In the (!) description, maybe "lowercase" should be in bold? Suggestion 3: * Maybe we can auto-generate a short-name or username based on the long-name introduced before, as a proposal that can be changed. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account

1 0

[Kune - Feature #246] (Closed) Add FAQ link to "More"
by Redmine Comunes 03 Sep '12

03 Sep '12

Issue #246 has been updated by Samer -. Status changed from Resolved to Closed % Done changed from 80 to 100 Resolution set to fixed ---------------------------------------- Feature #246: Add FAQ link to "More" http://redmine.ourproject.org/issues/246#change-388 * Author: Anonymous * Status: Closed * Priority: High * Assignee: Samer - * Category: Others * Target version: * Resolution: fixed ---------------------------------------- I feel many people will have questions about Kune but won't click on "kune development site" if they are not geeks. Maybe it's convenient to place a direct "FAQ" link to solve common questions. I'm thinking on the people that will know kune.cc but not the kune.op.org website -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account

1 0

[Kune - Feature #169] (Resolved) Sign-in username is confusing: force lowercase & more
by Redmine Comunes 03 Sep '12

03 Sep '12

Issue #169 has been updated by Samer -. Status changed from In Progress to Resolved % Done changed from 50 to 80 Applied in changeset commit:67e17205e2d79055773ec6b671f147a800fc36b0. ---------------------------------------- Feature #169: Sign-in username is confusing: force lowercase & more http://redmine.ourproject.org/issues/169#change-387 * Author: Anonymous * Status: Resolved * Priority: Normal * Assignee: Samer - * Category: Group space * Target version: * Resolution: ---------------------------------------- After several tests with people, both Dario and Sara had problems when creating the username. Both were insisting to use a name with capital letters, even though they were reading the (!) error. A similar problem occurred when creating a group. I don't know how to solve this, but I have three suggestions. I would apply the three, but probably the third takes more time. Suggestion 1: * ask "Name" before "Username" in user creation. It's more intuitive. * ask "Long name" before "Short name" in group creation Suggestion 2: * In the (!) description, maybe "lowercase" should be in bold? Suggestion 3: * Maybe we can auto-generate a short-name or username based on the long-name introduced before, as a proposal that can be changed. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account

1 0

[Kune - Feature #166] Add invite to participate (via email)
by Redmine Comunes 02 Sep '12

02 Sep '12

Issue #166 has been updated by Vicente J. Ruiz Jurado. Some discussion about design here: http://kune.cc/?locale=es#!kune.lists.1226.4539 ---------------------------------------- Feature #166: Add invite to participate (via email) http://redmine.ourproject.org/issues/166#change-386 * Author: Vicente J. Ruiz Jurado * Status: New * Priority: High * Assignee: Vicente J. Ruiz Jurado * Category: Group space * Target version: * Resolution: ---------------------------------------- Suggested by Aitor -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://redmine.ourproject.org/my/account

1 0