search

SolidOS / solidos

The operating system for Solid
https://solidos.solidcommunity.net/
MIT License
127 stars 19 forks source link

I don't know who I am #24

Open sideshowtom opened 3 years ago

sideshowtom commented 3 years ago

I log in to my pod, pod #1 I open another browser tab In that tab I go to another pod, pod #2 The person icon displays in the upper right corner in pod #2, indicating I'm logged in I think I'm logged in as the owner of pod #2, but I'm logged in as the owner of pod #1 There is no indication otherwise

ewingson commented 3 years ago

no idea how to code it, but I think it works with cookies...

bourgeoa commented 3 years ago

You don't know "who you are" because the solidos displays your photo and you don't have any.

There could be default representation being photo, if none nickname, If none webId ... Suggestions welcome.

jeff-zucker commented 3 years ago

If I have the same photo on webIdA and webidB, I won't know which webId I'm logged in with by looking at the picture. I suggest a hover-over that shows the webId.

jeff-zucker commented 3 years ago

WebIds can be long and foul up the display, so a hover-over solves that. And this would work whether or not the user has a photo.

timbl commented 3 years ago

I was lucky someone helped me make a bunch of avatars with different background colors to solve this problem of known which one i was logged in with. Not a general solution!

timbl commented 3 years ago

This an important problem, as being aware of which person you are acting as is an important part of security. So we must protect people from being confused. That includes people who have the same username (first part of domain) on different pod services (the rest of the domain). What I have done in apps like the chat app was to use the hash of the whole webid to generate a color. Maybe we could use that webid-hash-background-color around the login avatar as part of the solution.

jeff-zucker commented 3 years ago

One way that might be easiest on users - let people define short nicks for their identities. So if I have three webids with nicks "work" "play" "secret", It could be printed legibly and always appear and let the user know in their own words what identity they are using.

ewingson commented 3 years ago

@jeff-zucker @timbl @SharonStrats @theRealImy

that sounds reasonable, Jeff. I just noticed, we have that short name defined already in the edit profile section so we just would need to get that in the avatar section (preferably as hover as suggested). furthermore, this task seems little enough for me to give it a try. maybe Sharon, Timea and me can build a sub-team to tackle this. I now will leave some note (incl. pics) in the Gitter. please tell me what you think. I have a working fork and clone.

jeff-zucker commented 3 years ago

The short name is not the right thing. It is for public consumption and can occur on multiple WebIDs. I might have "jeffz" as a short name on both my work and play WebIDs so it would not help know which WebID I am currently using. If we do this, it will need to be a new predicate, something like solid:identityNick. It could be kept in a private resource since only the owner would ever need to know it.