Identity-inputs
Identity-inputs is an Identity related brainstorm towards adding to HTML5 and perhaps other standards.
summary
Better form annotation for expressing identity related interactions was a common theme discussed at the 2011 W3C workshop on Identity in the Browser (#idbrowser).
This is a work-in-progress brainstorm for how to add form annotation for expressing identity to HTML5.
use cases
2011-168: All of these represent common web forms / pages that web designers write markup for in typical login / e-commerce etc. sites/applications.
- sign-up AKA join
- sign-in AKA login
- challenge sign-in (e.g. when you do something on a site that makes it ask you to login again, e.g. when going to your shopping cart / checking-out on Amazon, or when a sign-in expires, e.g. Yahoo authentication, and you try to do something and get prompted to sign-in again)
- change password
- change id
- challenge change id
- forgot password
- forgot username
- forgot follow-up change password
sign-up
Typical sign-up forms have at a minimum the following semantic form inputs:
- new username/email
- new password
- confirm password
Some sign-up forms have:
- 2nd factor authentication
Specific example URLs and/or screenshots welcome and encouraged!
sign-in
Typical sign-in forms have:
- current username (might be text, email, or a URL e.g. OpenID/RelMeAuth)
- current password
- [x] Remember me
Specific example URLs and/or screenshots welcome and encouraged!
challenge sign-in
- current username (might be readonly)
- current password
- [x] Remember me
Specific example URLs and/or screenshots welcome and encouraged!
change password
- current password
- new password
- confirm password
Specific example URLs and/or screenshots welcome and encouraged!
change id
- current username
- new username (might be the same form field, e.g. Twitter id change field)
- (Save) button
Specific example URLs and/or screenshots welcome and encouraged!
challenge change id
- current username
- new username (might be the same form field)
- current password ?
Not sure about this one (as a real world use-casek, can't think of a site that does this off the top of my head).
Specific example URLs and/or screenshots welcome and encouraged!
forgot password
- current username
Specific example URLs and/or screenshots welcome and encouraged!
forgot username
- current email - used to look up username, or just submit a forgot password form.
Specific example URLs and/or screenshots welcome and encouraged!
forgot follow-up change password
When you receive a "forgot password" email, typically it has a link which when clicked takes you to a one-time form on the site which then makes you change your password with some form fields like:
- username (typically readonly)
- new password
- confirm password
Specific example URLs and/or screenshots welcome and encouraged!
...
history
Moving stuff here as it happens / gets iterated on.
informal brainstorming meeting 2011-06-17
Iterated on use-cases from 2011-05-25 presentation, came up with a few more use-cases, which implied a set of input semantics, which were then turned into iterations of straw proposals.
idbrowser workshop 2011-05-25
Straw proposal from Tantek presented at the 2011-05-25 W3C workshop on Identity in the Browser event.
- input type="identity-url"
- alternately: input type="url" identity
- input type="identity-email"
- alternately: input type="email" identity
- input type="identity-username"
- alternately: input type="text" identity
- input type="password" pwtype="sign-in"
- input type="password" pwtype="create"
- input type="password" pwtype="confirm"
- input type="checkbox" rememberme