= bug description =
When using OpenID login, the user is presented with an interstitial page that merely contains a 'Continue' button before being redirected to either the login page, or back to the original site.
It lasts just long enough that you may reach to interact with it, before it's replaced.
= bug analysis =
Not sure of the cause...
= fix recommendation =
... or the fix.
Placing in 'Security' as a best guess for where OpenID is tracked.
I know the button is needed in local development scenarios, but it auto-redirects in production. Not sure if there is a more elegant way to handle it.
Autoredirecting via a blank page would be less confusing to a user.
Note however, that if the user has javascript off, the continue button is needed still.
I think I could add a javascript bit that hides the button as soon as the page is loaded (or replace with a message "Please wait.." or the like?). That way its clearer to the user what's happening, and its still possible to use it without javascript.
Would this be a good solution for you?
Sure.
I have just updated python-openid in the infra repo (will push to EPEL when I get the OK from the maintainer). This version fixes that issue.
Login to comment on this ticket.