Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What Do You Think about This Seamless “Registering/Login” User Experience?

community.vanila.io

Post reply on HN
Print view View original

31–40 of 54 posts

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#31

Post by chocolatkey »

judge2020 wrote: post #28
lubujackson wrote: post #24

I saw this on Zillow and I tracked it down to https://github.com/openid/OpenYOLO-Web or some similar implementation of that protocol. I haven't looked into it yet but I've been intending to figure out how it works and I was surprised I haven't read about it yet anywhere.

Yes - https://github.com/zapier/google-yolo-inline But it seems the page for one tap - https://developers.google.com/identity/one-tap/web/ - is no longer a thing; the the only solution for "web" experiences is the "sign in/continue with google" javascript client that does the pop-up, eg. https://doodle.com/login .

They discontinued the other one because someone demonstrated that you could hide it under another element and trick people into clicking on it

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#32

Post by rhizome »

echelon wrote: post #2

This really disturbs me. What's the security model for this? Even if the site never learns my Google identity, I hate having to close the signup window. If I misclick, they get my identity. It's so sick.

I think it's probably the same as it ever was. By my read this is essentially Google releasing an iframe (or whatever) version of their "allow blorbulax.com?" page with the message reworded and combined with the "yes" button.

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#33

Post by rhizome »

edoceo wrote: post #12

I see one like this on other sites - eg Instagram. Hate it. Don't assume I want to give you my identity. But! Make it super easy for me to act when I decide. These force-auth types are over-reaching and intrusive. They cause pain to the power-user and cause incidental harm to the standard-user (and maybe more)

Heck, I don't like it also because I don't want to give Google the data they'll slurp from this connection.

Not for free, anyway.

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#34

Post by thosakwe »

EDIT: I misread the OP. I was under the impression that the popup came after clicking "Log in," rather than just being immediately shown on load. Ignore my comment.

Personally, I like it, and I think that from the typical user's perspective, it can probably be more convenient.

At least, it's more convenient than the classical "click a login link, which takes you to another page, try to remember your password, maybe hit I forgot and have to view your email, and then hope the site takes you back to the page you were originally on" flow. A big win is not having to leave the content you're currently viewing, which is an annoyance on mobile.

A lot of the comments on this thread strike me as cynical, and are dismissing the user experience aspect of something like this. Especially considering that the average user doesn't have a password manager (I could be wrong on this claim, I don't have a source ATM).

EDIT: I should clarify that I'm talking about the "quick sign in" pattern in general, not necessarily about any specific auth provider.

P.S. If you're trying to produce a similar flow on your site, the Credential Manager API (navigator.credentials) allows you save user credentials locally, so when they visit your site, their browser can automatically sign them in.

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#35

Post by tus88 »

How about: forgot what email I used for a particular website, so try and login (not register!) with one of them...oops it was the wrong one but I now have an account apparently along with welcome emails to match. I am very caution about putting an email into any login form without double checking it is the right one.

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#37

Post by the_pwner224 »

rpeden wrote: post #29
blfr wrote: post #25

Earlier quoted context omitted.

Notion.so does the same thing. You can log in with Google or get a magic link. User/password is an inconvenient method of logging in. True. But it's so common that we have password managers making it convenient again. And supposedly better solution don't have the benefit of that tooling.

I feel the same way you do. Although I'm just a sample size of one, but I've had zero success in convincing any friends or relatives to use a password manager. They either don't trust password managers, or don't want to change their current workflow. They don't seem to care that using a password manger is probably a better solution then using the same password everywhere or writing all their passwords in a little bla…

> Although I'm just a sample size of one, but I've had zero success in convincing any friends or relatives to use a password manager.

> They either don't trust password managers, or don't want to change their current workflow.

I used to memorize all my passwords but now I just use my browser's 'remember password' feature. In both Firefox & Chrome it syncs between devices, and is usable on both the desktop and mobile applications. There's no extra setup required, which was the big selling point (or I would still be memorizing them) - one day I reset the browser. FF e2e encrypts it too.

The only drawback is if you need to login on a foreign device - but that's a pretty rare circumstance, and if I can't remember the password I just reset it. I generate passwords with a pattern but I am saved the hassle of typing them in, and having to remember the exceptions that differ from the usual pattern.

Firefox even offers to generate a random secure password when you are creating a new account! It's a built-in solution which provides most of the benefits of a full password manager with 0 setup or switching cost.

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#38

Post by the_pwner224 »

Jonnax wrote: post #3

I don't like it. I makes me feel that a miss-tap will cause me to send my details to a site

> It makes me feel that a miss-tap will cause me to send my details to a site

This reminds me of one time when I logged in to Chrome and misclicked on the dialog that asked whether to sync data. I very quickly went to settings and disabled sync, but I have a feeling Google got all my bookmarks and history and saved passwords.

That's what finally made me delete Chrome (I had already been using Firefox primarily but now have Falkon (WebKit-based KDE browser) instead of Chrome).

Very malicious how the option to keep your information to yourself is gated behind many opt-outs but if you accidentally opt-in once they take everything.

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#39

Post by jayd16 »

tus88 wrote: post #35

How about: forgot what email I used for a particular website, so try and login (not register!) with one of them...oops it was the wrong one but I now have an account apparently along with welcome emails to match. I am very caution about putting an email into any login form without double checking it is the right one.

I guess you know if you see the "continue as xxx" confirmation?

Re: What Do You Think about This Seamless “Registering/Login” User Experience?

#40

Post by tus88 »

jayd16 wrote: post #39
tus88 wrote: post #35

How about: forgot what email I used for a particular website, so try and login (not register!) with one of them...oops it was the wrong one but I now have an account apparently along with welcome emails to match. I am very caution about putting an email into any login form without double checking it is the right one.

I guess you know if you see the "continue as xxx" confirmation?

I have noticed many lately that don't even do that. Its auto account creation upon invalid login.
Post reply on HN