? Pending

User tests: Successful: Unsuccessful:

avatar zero-24
zero-24
18 Apr 2020

Summary of Changes

Get rid of the not used gravatar from the webauthn plugin.

Testing Instructions

  • apply this patch
  • setup webauthn
  • confirm login works as expected.

Expected result

We don't use the image from gravatar so let's not try to get one.

Actual result

We try to get an image from gravatar that we don't use anyway.

Documentation Changes Required

None

cc @wilsonge

avatar zero-24 zero-24 - open - 18 Apr 2020
avatar zero-24 zero-24 - change - 18 Apr 2020
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 18 Apr 2020
Category Front End Plugins
avatar richard67 richard67 - change - 19 Apr 2020
Title
[4.0] Get rid of the not used gravater form the webauthn plugin.
[4.0] Get rid of the not used gravatar form the webauthn plugin.
avatar richard67 richard67 - edited - 19 Apr 2020
avatar richard67 richard67 - change - 19 Apr 2020
The description was changed
avatar richard67 richard67 - edited - 19 Apr 2020
avatar richard67
richard67 - comment - 19 Apr 2020

@zero-24 I've corrected spelling in title and description ("gravater" => "gravatar"). One thing is not clear to me. In section "Actual result" you write: "We dont try to get an image from gravatar that we dont use anyway.". Shouldn't that be "We try to get an image from gravatar that we dont use anyway.", i.e. without the "dont"? "Actual result" should describe what happens without this PR.

avatar zero-24 zero-24 - change - 19 Apr 2020
The description was changed
avatar zero-24 zero-24 - edited - 19 Apr 2020
avatar zero-24
zero-24 - comment - 19 Apr 2020

Fixed thanks.

avatar richard67 richard67 - change - 19 Apr 2020
The description was changed
avatar richard67 richard67 - edited - 19 Apr 2020
avatar wilsonge
wilsonge - comment - 9 May 2020

This is one of these awkward ones - do we need a way to let people add support generically for avatars so they can use them in their templates? (more than happy to remove the gravatar specific stuff)

avatar zero-24
zero-24 - comment - 10 May 2020

do we need a way to let people add support generically for avatars so they can use them in their templates?

Why should we? Right now the mail for one account would be the same for all tokens so it is quite useless to have a avatar (based on the users email) right?

To me it does not make sense to have a avatar there at all. But for sure can be implemented later when someone found a use case.

But up to you to decide on. Right now it is to me just an data leak leaking the users eMail to an external service without out us even using what is returned so to me this code here should not be included in the core package.

avatar wilsonge wilsonge - close - 19 May 2020
avatar wilsonge wilsonge - merge - 19 May 2020
avatar wilsonge wilsonge - change - 19 May 2020
Status Pending Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2020-05-19 18:47:48
Closed_By wilsonge
Labels Added: ?
avatar wilsonge
wilsonge - comment - 19 May 2020

Thanks!

Add a Comment

Login with GitHub to post a comment