Page MenuHomePhabricator

Show temp user status on Special:CentralAuth/<username>
Closed, ResolvedPublic

Description

@Tchanders should Special:CentralAuth/<username> be any different for temp users? E.g. show when the account will expire?

@Tgr We hadn't made any specific plans about showing anything different on Special:CentralAuth. But if we can reliably calculate expiry time (and also whether an account has expired) I can see that'd be helpful. FAO @Madalina too.

In theory the expiry time is registration date plus $wgAutoCreateTempUser['expiryAfterDays']. In practice expiry is done with a maintenance script so the exact timing is unpredictable, but I don't think a small inaccuracy matters. We use the same date logic to show the temp users themselves a warning.

I don't think there's a good way to accurately tell whether an account is expired right now, other than guessing from the date. We expire them by invalidating the session; from the system's point of view the account is in a normal state, the user just doesn't have any session cookie to access it anymore. So I wouldn't show something like "this account has expired" because for that there's more expectation to be 100% correct. But "expires on <day>" seems OK to me.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change 1006178 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[mediawiki/extensions/CentralAuth@master] Show temp user status on Special:CentralAuth

https://gerrit.wikimedia.org/r/1006178

Change #1006178 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] Show temp user status on Special:CentralAuth

https://gerrit.wikimedia.org/r/1006178

Status quo from testwiki:

image.png (1×3 px, 284 KB)

cc @Niharika @KColeman-WMF, something for us to discuss from a product, design and technical direction.

The page is different when the temporary account is expired. This is because a "Temporary account expired" bullet point is added to the "Global account information" box. An example is below:

image.png (483×970 px, 31 KB)

pmiazga subscribed.

@kostajh moving to radar - in case you need our help please ping us.

@KColeman-WMF @Niharika this needs some design and product input.

Looking at:

image.png (930×1 px, 107 KB)

I would propose we add a line for Temporary account expiry date: 19 December 2024 (registration date + maximum temp account age in configuration)

And then I think we could resolve this task. What do you think?

@KColeman-WMF @Niharika this needs some design and product input.
I would propose we add a line for Temporary account expiry date: 19 December 2024 (registration date + maximum temp account age in configuration)

Would this replace the line that already exists but is only shown when the temporary account expires:

image.png (483×970 px, 31 KB)

@KColeman-WMF @Niharika this needs some design and product input.
I would propose we add a line for Temporary account expiry date: 19 December 2024 (registration date + maximum temp account age in configuration)

Would this replace the line that already exists but is only shown when the temporary account expires:

image.png (483×970 px, 31 KB)

No, we'd keep that line.

Although, maybe showing expected expiry is not really useful. I can't imagine what someone would need it for at a glance, and it's easily mentally calculated.

What is the user story / use case for wanting to see an expected expiry of a temp account on this page?

@kostajh - one question that got me thinking - I assume that expiryAfterDays won't be changed often, but it probably won't change at all. Do we foresee any scenarios when this value gets changed on prod? If we increase it - is it going to "re-enable" all temp-accounts that were previously expired but are still "active" ?

@kostajh - one question that got me thinking - I assume that expiryAfterDays won't be changed often, but it probably won't change at all. Do we foresee any scenarios when this value gets changed on prod? If we increase it - is it going to "re-enable" all temp-accounts that were previously expired but are still "active" ?

I suspect that if anything, we would decrease the default value (90 days). But if we increase it, there's no impact on expired temp accounts -- they are already logged out, session invalidated, and no way to get back into their account.

What is the user story / use case for wanting to see an expected expiry of a temp account on this page?

People who are not yet familiar with temporary accounts (which will be most people at first) might benefit from a reminder that the account is temporary, will expire in X number of days, etc. But we'd probably be fine not including this additional information here.

I'm on the fence about it. It's possible the user got rid of the cookie accidentally and the account already "expired" but we can't reliably indicate that.

I see Kosta's point about reminding users that this is a temporary account but I think this page is likely only to be used by active functionaries who should already be familiar with the concept of temp accounts.

@KColeman-WMF @Niharika this needs some design and product input.
I would propose we add a line for Temporary account expiry date: 19 December 2024 (registration date + maximum temp account age in configuration)

Would this replace the line that already exists but is only shown when the temporary account expires:

image.png (483×970 px, 31 KB)

Is that line also shown when the temp account hasn't expired yet?

I'm on the fence about it. It's possible the user got rid of the cookie accidentally and the account already "expired" but we can't reliably indicate that.

I see Kosta's point about reminding users that this is a temporary account but I think this page is likely only to be used by active functionaries who should already be familiar with the concept of temp accounts.

@KColeman-WMF @Niharika this needs some design and product input.
I would propose we add a line for Temporary account expiry date: 19 December 2024 (registration date + maximum temp account age in configuration)

Would this replace the line that already exists but is only shown when the temporary account expires:

image.png (483×970 px, 31 KB)

Is that line also shown when the temp account hasn't expired yet?

No. Only shown after the temporary account should been have expired based on the expiry configuration.

@Niharika wrote:

I think this page is likely only to be used by active functionaries who should already be familiar with the concept of temp accounts.

This is my assumption too therefore I don't think we need to include the line about expiry, unless it's already expired (as in the example from @Dreamy_Jazz) Happy for this assumption to be challenged though!

@Niharika wrote:

I think this page is likely only to be used by active functionaries who should already be familiar with the concept of temp accounts.

This is my assumption too therefore I don't think we need to include the line about expiry, unless it's already expired (as in the example from @Dreamy_Jazz) Happy for this assumption to be challenged though!

Yeah, I can see that side. OTOH I would assume that people will be unsure and unfamiliar with temporary accounts at launch, and probably for a long time afterward, and I wouldn't expect functionaries to remember details like the configuration set for the expiration. But, yeah, this is all quite minor, so I am fine to leave it out of the UX until someone from the wikis asks us to add it.

Can we close this task for now? We denote whether a temporary account has expired on Special:CentralAuth. The other idea of showing the expected date for expiry seems to be something we would add only if asked for it. I'm not sure what else we would do for this task, given that the task description only mentions showing the expiry for the temporary account.