CVS log for loncom/interface/createaccount.pm

Up to [LON-CAPA] / loncom / interface

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- Authoring Space defaults defaults which domain coordinator can override.
  - Available Editors, WebDAV access, Disk Quota for Authoring Space
    can be set for specific users by DC via "Add/modify user"
- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors
  - Existing co-author(s) can be assigned rights to add/revoke co-author
    roles. Can be set by DC via "Add/modify user" or by author via "People"
- Co-authors and Assistant co-authors can view a list of co-authors for
  the Authoring Space. Availability set by Author or Co-author "manager".
  Listing can be set to "opt-in".

- For 2.11.4 (modified)
  Include change in 1.87

- Hint to browsers to not autofill password fields.

- For 2.11.4 (modified)
  Include changes in 1.86

- Move &passwd_validation_js() to loncommon.pm to facilitate re-use.

- For 2.11
  Backport 1.83, 1.84, 1.85

- g-recaptcha (ReCaptcha v2) needs to be in "server" form not "client" form.
  - Reverse part of change in createaccount.pm 1.83
  - Validation box with "Create account" button now below Personal Data table
    to reduce likelihood that repeated of reCaptcha will be needed.

- Putting line breaks added in rev. 1.83 in the correct place.

- Captcha on public-facing web forms.
  - textbox user entry for original Captcha on same line as instructions.
  - validation for reCaptcha 2 moved to immediately above form submission
    button, as there re-validation is required after 2 minutes.

- For 2.11
  Backport 1.82

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()
- Domain configuration to allow domain's LON-CAPA nodes to operate behind a
  WAF/Reverse Proxy using aliased hostname (CNAME).
- Web requests from other nodes bypass the WAF as their requests are made
  directly to the server hostname (A record); same for internal LON-CAPA
  connections for lonc -> lond.

- For 2.11
  - Backport 1.81

- Fewer localized phrases needed.

- For 2.11
  Backport 1.80

- Use complete sentence to facilitate internationalization.

- For 2.11
  Backport 1.77, 1.78, 1.79

- Domain Configuration for passwords for internally-authenticated users.
  - Default minimum password length of 7 set in a single location.
  - Value for min length set in domain's configuration may not be less than
    the default.
  - javascript function:  warnIntPass() warns aboit invalid values for
    min and max length, expiration time, and number saved for domain
    config for passwords.

- For 2.11
  Backport 1.73, 1.74, 1.75

- Response to incorrect Captcha on account creation page is to display a page
  containing a link back to the form, instead of a call to &invalid_state().
- Rules for length and/or characters in a LON-CAPA password (internal auth)
  checked server-side when a user self-creates a user account.
  - rule-checking code moved from lonpreferences.pm to loncommon.pm to
    facilitate reuse.

- Rules for length and/or characters in a LON-CAPA password (internal auth)
  checked client-side when a user self-creates a user account.

- For 2.11
  Backport 1.76

- For 2.11.2 (modified)
  - Include changes in rev. 1.76.

- Use three-argument open() to separate file mode from the filename.

- Show self-reported affiliation with account request web form.

- Self-creation of user accounts using e-mail verification.
  - Options set by domain coordinator for account requests verified by e-mail
    for: processing, restrictions on permitted e-mail addresses, and choice
    of username can be set to different values, depending on requester's
    (self-reported) institutional status.
  - Setting which status types can be self-reported by requesters using
    e-mail verification moved from
    "Default authentication/language/timezone/portal/types" panel to
    "Users self-creating accounts" panel.
  - Web form used to request account prompts user for appropriate responses
    depending on self-reported status, and e-mail and username constraints.

- Self-creation of user accounts using e-mail verification.
  - User can be prompted to choose affiliation (e.g., instructor, student,
    other etc.).
  - User can be given option to choose a username, while e-mail address
    still used for verification. A required e-mail domain can be set.
  - Domain Coordinator can display user-selected status and user's e-mail
    address when choosing to approve queued account requests.

- Support version 2 of Google reCAPTCHA.

- Bug 5679

fixed bug 6782, and escaped most localized messages used in Javascript blocks to make sure bugs like that do not happen again

- When an institutionally authenticated user creates a new account on a load
  balancer server, detection of load balancer status should be based on
  information in domain's configuration.db, and only use the legacy check for
  lonBalancer 1 in Apache config files, if the web GUI has yet to be used.

- Where self-creation of accounts is enabled for institutional log-in and
  also e-mail address as username, call to &javascript_setforms() needs to
  occur from within print_dataentry_form() so that args required for CAPTCHA
  validation are passed (when ReCAPTCHA or CAPTCHA are in use).

- If "Self-creation with e-mail as username" settings have yet to be set
  for a domain (2.11 feature), but self-creation enabled for e-mail
  address as username (available pre-2.11), optional user informational
  fields: firstname and lastname in web form.

- Domain configuration for self-creation of accounts by users authenticated
  via Shibboleth SSO.
  - Actually check in %ENV with the variable saved in the domain config.

- Domain configuration for self-creation of accounts by users authenticated
  via Shibboleth SSO.
  - Set which environment variables provided by Shibboleth map to which
    user information fields.

- Institutional ststus types can now be defined via domain configuration
  web interface by Domain Coordinator -- will supercede use of customized
  localenroll::inst_usertypes().

- Self-creation of account with e-mail address as username:
  - Domain configuration to set which status types (faculty, staff , student
    etc.) can apply to "non-institutional" usernames.
  - Processing of username requests can be either automatic or queued for
    approval depending on status type (self-reported).

- Correct name of inststatus item stored during account creation process
  for e-mail address as username.

- satisfy w3c validation
- keep tags out of title attribute in <li> tag in breadcrumbs

- Bug 6646
  - Status types (e.g., faculty, staff, student etc.) can apply to users
    creating their own accounts with an e-mail address as username.
  - Different user information can be required depending on self-reported
     status type.
  - User information to be provided when requesting an account can be
    designated as 'required' or 'optional', with client-side javascript
    prompt for missing required fields.

- upasscheck<timestamp> form element not used for log-in for new user
  self-creation web form for institutional username/password.

- Bug 6646
  - Self-creation of user accounts with e-mail address as username.
  - Now user information and password are requested from prospective user in
    a single web page, need to support submission of either original CAPTCHA
    or newer reCAPTCHA input by copying from "client" to "server" forms.

- Bug 6646
  - Self-creation of user accounts with e-mail address as username.
  - User information and password requested from prospective user in a single
    web form.
  - Add routines to handle creation of user accounts and notification
    following approval by Domain Coordinator.

- Support access to Shibboleth environment variables defined in
  attribute-map.xml via %ENV, when user without a LON-CAPA account
  authenticates via Shibboleth SSO.

- On multi-domain servers preserve information about domain in which user
  without an account is requesting creation of one, for domain where
  self-creation of accounts is permitted.

- Administrator e-mail perlvar in loncapa.conf is lonAdmEMail not lonAdminEmail.

XHTML: Corrected <a> tag closure (-> rev. 1.1)

- Remove line no longer needed following changes in rev 1.52.

- Validation of human (CAPTCHA).
  - self creation of account (e-mail address as username).
  - choice of CAPTCHA:  original (Authen::CAPTCHA) or newer reCAPTCHA (requires)
    DC to create account with http://www.google.com/recaptcha/, or not used.
  - Routines to generate CAPTCHA input and validate response moved to loncommon.pm
    to facilitate re-use.
  - Domain configuration for self-creation of accounts allows DC to choose which
    CAPTCHA option to use.
- CPAN module: Captcha::reCAPTCHA now needed. rpm being added to msu/testing repos,
  and dependency included in LONCAPA-prerequisites 1-21.

- Changes to: &create_account() third arg: $lonhost eliminated (not used).
  - now returns third item - $uhome (lonHostID of new user's home server).
- Changes to calls to &start_session() - fourth arg is now $uhome
  (lonHostID of new user's home server) instead of lonHostID of server
  hosting session.
- Changes to calls to &Apache::lonauth::success() pass $uhome as fourth arg
  instead of $lonhost.

Documentation

Documentation

Replaced calls to selfenroll::validate_course_id and createaccount::validate_course by lonnet::is_course.
Extended functionality of lonnet::is_course.
Code cleanup.

- Customization for MITrelate.
  - Different sections assigned to existing users and new users who sign-up
    for Summer course, so demographic survey is only shown to new users.

- Customization for MITrelate
  - Add line breaks to improve readability.

- Customization for MITrelate
  - Missing paren.
  - Changes to custom text.

- Customization for MITrelate
  - Sign-up for summer cohort.
  - Disable printout generation for summer course.

- Customization for MITrelate
- Replace courseID for self-enrollment with courseID for Mechanics Online
  in the case where users access sign-up from a cached version of:
  http://relate.mit.edu/physicscourse

- Customization for MITrelate.
- Remove duplicate line.

MITrelate
- Update e-mail message sent to complete sign-up.

- Customization for MITrelate.
  - Wording: LON-CAPA -> Mechanics Online
  - Remove unwanted closing paren.

- Customization for MITrelate.
  - Customized text in e-mail sent containing link used to complete sign-up
     process.

- Customization for MITrelate.
  - Missing punctuation.
  - Improve readability with bulleted list.

- Customization for MITrelate
  - $r->dir_config() to get reCAPTCHA perlvars.
  - Missing ;

- Customization for MITrelate
  - retrieve reCAPTCHA keys from Apache config.

- Customization for MITrelate.
  - Wording change
  - Fix placeholder numbering in &mt() call.

- Customization for MITrelate
  - replace "Learn Physics" with "Mechanics Online" to better reflect scope
    of project.

- Fix typo.
- Update documentation for URL to use to generate reCAPTCHA keys.

- Customization for MITrelate.
  - Custom wording for createaccount page.

- Customatization for MITrelate.
  - Forward port: 1.37.2.1, 1.37.2.2, 1.37.2.3, 1.37.2.4, 1.37.2.5.

- Backport 1.46.

- Backport 1.47.

- Bug 6514.
  Self-creation for institutional/SSO auth in domains with no defined
  usertypes needs default.

- xhtml.

- Backport 1.43, 1.44, 1.45.

- Fix quotes in selfenroll breadcrumbs.

- Customization for GCI_3.
  - Support for multiple Concept Inventories.

- Customization for GCI_3.
  - Backport 1.44.

- Self-creation of account with e-mail address as username.
  - Link to helpdesk support form includes username and e-mail address in query
    string if new account is requested for an account which already exists.

- Customization for GCI_3
  - Line feeds to improve readability of URL to complete account creation it email.
  - Fix quotes in links to log-in and reset pages.

- Customization for GCI_3
   - Backport 1.43.
   - More comprehensive feedback when faculty attempts to sign-up for a
     new GCI WebCenter account when one has already been created for him/her.

- Typo. Include change in key used in localization files.

- Customization for GCI_3
   - Backport 1.42

- Missing concatenator.

- Customization for GCI_3.
  - Alert when creating account that usernames are all lower case.
  - Hint to reload reCAPTCHA if words are hard to read.

- Backport 1.41.

- Change the way tokens are named.

- Backport 1.40.

- For 2.10 reverse changes in 1.39 (Remote Control retained in 2.10).

- pass %got_rules to &call_rulecheck() by reference.

In process of removing remote control, remote navmap and different icon modes code
- removed no_inline_link argument from loncommon::start_page, loncommon::bodytag
- removed subs
    o loncommon::head: it wasn't used
    o loncommon::endheadtag: functionality now covered by loncommon::headtag
    o lonmenu::registerurl: functionality moved to loncommon::headtag, because it was the only function that called registerurl
- removed remote control related translations in de.pm
- refactoring and cleanup

Removed double spacing from translation phrases
 -> HTML/Browsers ignore them anyway
 -> less error prone for translators
Adjusted language files accordingly (de, es, zh)

- Customization for GCI_3
  - Equivalent to changes between 1.32 and 1.32.2.1
  - Wording changes to use GCI WebCenter
  - Use Captcha::reCAPTCHA in place of Authen::Captcha

Consistent wording "Course Catalog" -> "Course/Community Catalog"

- Equivalent to changes between 1.32 and 1.32.2.1
- Customization for GCI_2
- Wording changes to use GCI WebCenter
- Use Captcha::reCAPTCHA in place of Authen::Captcha

- Customization for GCI_1
- Wording changes to use GCI WebCenter
- Use Captcha::reCAPTCHA in place of Authen::Captcha

XHTML:
- XHTML conform <img> tag closure
- Added some missing alt attributes to <img>

- Domain setting for institutional affiliation(s) required for user to create his/her own account (applies to institutional login/SSO only).
  - &get_creation_controls() retrieves domain settings:
    (a) Username types allowed to create own account (login, sso or email)
    (b) Institutional affiliations allowed to create own account
        (e.g., Faculty, Staff etc.).
  - &username_check() has affiliations check for login/sso types.

XHTML conform tags (input, br, hr)

Edited Exit, Logout, log in, log out in eng/ger for consistent wording.

- Replace "button" form element with "submit" form element.
  - javascript traigger changed from "onclick" to "onsubmit".
- Eliminate display of "Forgot password?" link in log-in box when log-in is reached from "New user" link on main log-in page.
- Increase size of username and password input boxes in log-in box.
- Replace custom data entry form by reusing loncreateuser::personal_data_display() for entry of user information for users requesting accounts with e-mail address as username.
- Add udom form element to "server" form in login box, and modify javascript to synchronize server form's udom value with client form's value, so an institutional self-enroller's domain choice is not ignored.

sub login_box:
- Separate line for login button
- Same item order as on main login screen (domain at bottom now)

- account creation process should not be interrupted by creation of a publicuser_N handle
when the user accesses a help file.

Added "Forgot password?" link to simple login screen, e.g. used for self-enrollment

Bug 5877.
 - Occasionally Authen::Captcha fails to generate an image.
 - In &create_captcha() loop the Authen::Captcha->new() call until an image is generated, or 10 attempts have been made.
 - Display an error message if no success after 10 attempts.

- If a user needs to create a user account to self enroll in a course, the user's domain should be the domain of the course.

consistent notation of e-mail in sentences and E-mail in titles.

typo

- Same wording everywhere: Student/Employee ID
- Optimized some &mt() calls

- Fix typo (missing quote after cid in call to echo_form_output().
- Checking of username against institutional rules moved to &call_rulecheck() routine.
- Institutional ststus types including as final arg in call to Apache::lonnet::modifyuser().
- Sanity checking so unmodifiable fields use institutional data for the new user.

- Breadcrumbs added to facilitate retreat to earlier pages during account creation process.
- &catreturn_js() added to provide javascript functions used in breadcrumb trail to jump back to
  course catalog or first self-enrollment screen, when account creation occuring in context of self-rnrollment
- &print_footer() added to provide backupcrumbs form where coursecatalog search terms are stored so breadcrumb links can jump back to entry point from course catalog in self-enroll context.
- &selfenroll_crumbs() added to provide additional breadcrumbs in selfe-ennroll context.
- &login_failure_msg() added to put messages displayed when authentication fails in one place, with a link back to try again.
- form element cid renamed courseid (and $cid renamed $courseid) to avoid confusing this with the cid form element used for entering a studentID in loncreateuser:personal_data_display().

- already declared.

- move generation of log-in screen to &login_box().
- additional possible phase - selfenroll_login - when log-in box is to be generated for users wishing to self-enroll in a course, who are not logged in, and clicked "logg-in" link.

Log-in screen for institutional IDs to create new accounts:
- If user enters an existing username (for current domain):
  - password is correct: log the user in.
  - incorrect password: report invalid username or password.

Move duplicate code in lonauth.pm and createaccount.pm which handles result from createaccount::username_check() into username_check() for both log-in ID and SSO cases.
- additional args ($contact_name $sso_logout) passed to &username_check for SSO case.
- Page for user information data table customized based on availability of data fields, and whther data can be entered (according to $rowcount and $editable args returned from &loncreateuser::personal_data_display().
 - If no values are available or editable don't display table.
 - If only non-editable values are available - display table with appropriate message.
 - If one or more editable values - display table with appropriate message.
If username check reports errors (e.g., 'username' not in institutional database, or 'authtoken' - authtoken could not be set) - display appropriate error reports.

- Add &sso_logout_frag() to provide a link to logout of an SSO session if username creation is not possible.
- Moved some <br /> for a more compact display for SSO authenticated case.
- Typo in an <h4></h4> header line.

- Eliminating use of the word domain, and replacing with institution in most cases.  New users will not necessarily know what is meant by a LON-CAPA domain.

- Contact e-mail address should be for domain in whihc user is creating the account, not the default domain of the server hosting the session.
- Set contact e-mail address to the first address in the comma-separated list from loncommon::build_recipient_list().
- Added "Account creation unavailable" where username_check() reported failure for uauthenticated SSO users creating LON-CAPA accounts.

- Adding some header lines and wrapping some messages in <span>s for LC_warning or LC_error.

- Store captcha image and captcha code in lonCaptchaDir and lonCaptchaDb
   respectively.
- Entry in loncapafiles.lpml to create necessary directories during install.

- client side javascript validation of e-mail address format for e-mail being proposed as username.

- Directory for storage of temporary Captcha images.

- Restore another <br /> (needed for two column display from the <div></div>,
  for create account with login and create account with e-mail address.

- Fix some changes made in rev 1.6.
- Remove single quotes around $esc_token
- Restore <br /> (it's needed for two column display from the <div></div>)
- Some &mt()

- Token required on user information data entry page.
- Token validation required for account creation.

Wording and optimized &mt() calls:
e.g., same text for same function; use already existing phrases; links as parameters; no html inside mt(), etc.

Use standard text for login/authentication problems and added warning style

- selfcreation auth types are now stored as an array, instead of a single-valued scalar.
- if a user successfully authenticates via SSO, but a LON-CAPA account is lacking for the username used to authenticate, user can create an account, if selfcreation is allowed for the 'sso' auth type.

- Functionality for requesting user information from a user authenticated by a domain's default authentication (must be either Kerberos of localauth) moved to new &username_check() subroutine.
- Remove $reqtime - not used
- Add missing space in message displayed when token information is incomplete.

- user is automatically logged in after completing the account creation process
- if account creation occurred in the context of a request for self-enrollment, the course ID for the intended course is retained, the user proceeds to self-enrollment after auto log-in.

- Replace "selfenroll" with "selfcreate" in various subroutine names, and modify text which refers to self-enrollment to refer to user creation of accounts.
- Intended to clarify that these procedures relate to a user creating his/her own account in a LON-CAPA domain as opposed to self-enrolling in a course, once the user has an account.

Bug 5558. Visitors without a LON-CAPA account can create one, using an e-mail address (sends a URL to the address provided, which needs to be visited to complete the process), or an institutional login (authentication required).

Requires Authen::Captcha perl module to discourage robotic account requests.

Work in progress.