Page MenuHomePhabricator

Copying/opening one-time login links is impossible
Closed, ResolvedPublic

Description

I often have to generate one-time login links on remote headless servers and use them to log into a web based GUI.

The problem is that Terminology apparently requests the URI as soon as I hover the link so once I try to open or copy it, it's useless. I tried disabling the URL (All) helper, the "Inline if possible" option in Terminology, as well as "Disable remote media fetching" in Teamwork, but none of them seem to have helped. (Should they?)

TwoD created this task.Dec 30 2015, 2:31 AM
TwoD updated the task description. (Show Details)
TwoD raised the priority of this task from to Incoming Queue.
TwoD added a project: Terminology.
TwoD added a subscriber: TwoD.

You should disable the Teamwork module in enlightenment.

TwoD added a comment.Dec 30 2015, 2:44 AM

Well, that works, but what if I still want the other previews, image URLs etc?

You won't be able to have it on hover unless it does it for every url.

TwoD added a comment.Dec 30 2015, 2:56 AM

Ok, I though it tried to be clever and tell image/video/other URLs apart by the file extension (if any) before requesting it (and possibly checking the response headers?). Haven't looked at the source of either Terminology or the Teamwork stuff...

The one-time URLs I get do not have a file extension and all image URLs I've seen it work with have ended in .png, .jpg, etc.

Would it be possible to implement such a pre-request-check or would it be too much of a hassle?

billiob added a project: Restricted Project.Dec 30 2015, 4:32 AM
billiob added a subscriber: zmike.
billiob triaged this task as Normal priority.May 14 2016, 1:40 AM
zmike added a comment.May 14 2016, 5:11 AM

Hm the problem is that a lot of image urls nowadays don't end in an image extension. Can you give a non-functional example of such a url?

TwoD added a comment.May 14 2016, 5:14 AM

If you mean a one-time-login URL, here's one I just generated for a Drupal site: http://example.com/user/reset/1/1463227991/eEHUNYEbRl5ZlEHEVGMfM2ocVX1-IR8nDXjIbUiye7A/login.

zmike added a comment.May 16 2016, 8:25 AM

I'm not sure how best to handle this. On one hand, I certainly want links to work in applications using Teamwork, but on the other hand I also want Teamwork to function as expected on all media-type links. I think my ideal solution would be something like having a way to toggle Teamwork activation, but that's not immediately intuitive to users (unless I add a tutorial for it somewhere).

TwoD added a comment.May 16 2016, 11:43 PM

If there was a quick way to toggle Teamwork quickly, that'd be fine. I think my main problem with this was that I at first didn't understand what was happening and why the links were already expired when I clicked on them. There was no indication that Teamwork failed to render a preview, or that it even tried to do so. (Not one that I could notice anyway.)
Maybe if a tooltip appeared with the text "Teamwork opening preview..." (and then one with "No preview available" which fades out after a few seconds if I still hover it) I would have immediately understood why the link was unusable after that.

I was thinking more like a way for the application to determine whether to use Teamwork, eg. holding Control while mousing over a link prevents it from activating Teamwork. But this is somewhat unintuitive for inexperienced users...

@TwoD: If you do a curl -X HEAD http://example.com/user/reset/1/1463227991/eEHUNYEbRl5ZlEHEVGMfM2ocVX1-IR8nDXjIbUiye7A, does that make the link invalid?

TwoD added a comment.May 18 2016, 12:44 PM

@zmike I think that'd work. Maybe add a Tutorial/Hints button in the Terminology Controls section with that information?

@billiob Unfortunately, yes.
I get a "302 Found" response back with a redirect to the path which lets me enter a new password...

TwoD added a comment.EditedMay 29 2016, 11:59 PM

I think always using at least an initial HEAD request would be convenient anyway. Accidentally hovered the URL to a .jar file (~20MB) and it made the entire desktop (not the cursor) hang until I restarted Enlightenment.
Happens every time I hover it. :/

zmike added a comment.May 30 2016, 7:51 AM

Do you have a sample .jar file that I can test with?

I'll spend some time on this in the next few days.

zmike added a comment.Jun 2 2016, 9:35 AM

Hm, it cancels as expected here with the default setting (file is larger than default maximum size) and then even if I increase it then the content-type is detected as unloadable and it gets canceled. Are you using the default teamwork settings?