Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The session verification is near unusable if I want to boot one #18520

Closed
ell1e opened this issue Aug 13, 2021 · 4 comments
Closed

The session verification is near unusable if I want to boot one #18520

ell1e opened this issue Aug 13, 2021 · 4 comments
Labels
A-E2EE-Cross-Signing O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist T-Enhancement X-Needs-Design

Comments

@ell1e
Copy link

ell1e commented Aug 13, 2021

Steps to reproduce

  1. Get the popup for a new unverified session
  2. Decide you want to boot it (NOT verify it). This might be a reasonable desire if you just tried another client where you didn't keep the session alive, so you no longer have access to it (in which case verification can't really work and is pointless anyway.)

What happened?

The UI for this is basically near unusable for this task. The session verify UI lists all sessions clearly marking the unverified ones, but if I click any entry I get this dialog:

Screenshot from 2021-08-13 07-21-43

As you can see, there is absolutely no option to delete the session. Why? Now if I go to the settings, I get this differently unusable UI:

Screenshot from 2021-08-13 07-23-20

As you can see, while here I can delete sessions, there is zero indication in this one which one is unverified. I am aware I could find the ID in the other list, the hard to remember super random letter number string, and then go back to this one to look for it, but that's just clumsy and frustrating.

What did you expect?

Make these two lists one, instead of having two slightly different ones that each lack vital functionality or information. There should be one list which both allows deletion and verification, and which shows both IP & time as well as current verification status. The current separation just seems so clumsy to work with.

Operating system

All of them

Application version

Element version: 1.7.33 olm version: 3.2.3

How did you install the app?

flatpak

@ell1e ell1e added the T-Defect label Aug 13, 2021
@germain-gg germain-gg added T-Enhancement X-Needs-Design A-E2EE-Cross-Signing O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist and removed T-Defect labels Aug 13, 2021
@adsick
Copy link

adsick commented Oct 22, 2021

In fact now I have no opportunity to verify because I have no other valid session - I've reset my phone and so I'm fkd up... I don't remember if anything told me earlier that I need to maintain the chain of sessions, but it is rather obvious that if I registered with email and password I should have full access to my accout using only these and nothing else!

@adsick
Copy link

adsick commented Oct 22, 2021

and it's been a long time already, but Element does not seem to bother. Sessions should expire after some time and so that Element can see that there are no more valid sessions to verify from, omg, I feel bad about it...

@richvdh
Copy link
Member

richvdh commented Jan 21, 2025

If this is still a concern, could you file separate issues for the separate bits of UI?

@richvdh richvdh closed this as completed Jan 21, 2025
@richvdh
Copy link
Member

richvdh commented Jan 21, 2025

possibly a duplicate of #17320

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-E2EE-Cross-Signing O-Occasional Affects or can be seen by some users regularly or most users rarely S-Minor Impairs non-critical functionality or suitable workarounds exist T-Enhancement X-Needs-Design
Projects
None yet
Development

No branches or pull requests

4 participants