silverstripe / silverstripe-session-manager

Allow users to manage and revoke access to multiple login sessions across devices.
BSD 3-Clause "New" or "Revised" License
9 stars 7 forks source link

Reference 'sessions' not 'devices' #69

Closed brynwhyman closed 3 years ago

brynwhyman commented 3 years ago

Overview

There is some expected overlap between the phrases 'sessions' and 'devices' when looking at this feature. We need to use both terms to paint a clear picture of what's happening. Upon reviewing the current UI, there has been some discussion on tweaking the use of these terms slightly.

At a high-level, it's suggested that we refer to the information and frame it as a 'session', not a 'device' That's also more technically correct given it's the session data that the module is tracking - there's no 'device_ID' for example.

Acceptance Criteria

PRs

Notes

-

brynwhyman commented 3 years ago

cc @clarkepaul do you want to chime in with your thoughts on this one?

brynwhyman commented 3 years ago

This view from GitHub sparked the conversation: image

michalkleiner commented 3 years ago

If there's a note somewhere at the beginning of the docs about what each of the terms means and that a single device can hold several sessions, then I'd prefer going with sessions wherever possible and contextually correct.

clarkepaul commented 3 years ago

Referring to "Sessions" makes much more sense for the current functionality we currently have (I think the functionality is fine with a wording change). The easy call to make is changing the label of the section. Just having "Sessions" instead of "Authenticated devices" might be a little abrupt for our audience so playing with a few options, whatever it is I think it should be understandable if you are looking at someone else's sessions too (if devs have provided that extra functionality).

  1. Active sessions
  2. Login sessions
  3. Device sessions
  4. User sessions
  5. Where you're logged in
  6. Sessions
  7. Logged in

I would have thought it was obvious as to what people should do if they don't recognise a session so I'm a little surprised GitHub explains the area, especially with the audience they have, but then again this is a fairly important section and maybe these types of patterns a more common now than they used to be. The likes of Facebook don't provide any additional info but their label is super easy to understand for non-tech types "Where you're logged in".

By simply not using the word "Device" it makes a lot more sense, even if the word "Sessions" wasn't used. I think I quite like the simplicity of "Logged in", it makes sense to all user types, and also implies sessions.

bergice commented 3 years ago

Referring to "Sessions" makes much more sense for the current functionality we currently have (I think the functionality is fine with a wording change). The easy call to make is changing the label of the section. Just having "Sessions" instead of "Authenticated devices" might be a little abrupt for our audience so playing with a few options, whatever it is I think it should be understandable if you are looking at someone else's sessions too (if devs have provided that extra functionality).

  1. Active sessions
  2. Login sessions
  3. Device sessions
  4. User sessions
  5. Where you're logged in
  6. Sessions
  7. Logged in

I would have thought it was obvious as to what people should do if they don't recognise a session so I'm a little surprised GitHub explains the area, especially with the audience they have, but then again this is a fairly important section and maybe these types of patterns a more common now than they used to be. The likes of Facebook don't provide any additional info but their label is super easy to understand for non-tech types "Where you're logged in".

By simply not using the word "Device" it makes a lot more sense, even if the word "Sessions" wasn't used. I think I quite like the simplicity of "Logged in", it makes sense to all user types, and also implies sessions.

@clarkepaul I've gone with "Login Sessions" as you've suggested it and it's literally the name of the class that stores the data which will keep developers happy as well.

clarkepaul commented 3 years ago

Cool, just make sure its lowercase 's' for Login sessions (sentence case)