[tbb-bugs] #30237 [Applications/Tor Browser]: Tor Browser: Improve TBB UI of hidden service client authorization

[Tor Bug Tracker & Wiki]

#30237: Tor Browser: Improve TBB UI of hidden service client authorization
--------------------------------------+-----------------------------------
 Reporter:  asn                       |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  TorBrowserTeam201905      |  Actual Points:
Parent ID:  #30000                    |         Points:
 Reviewer:                            |        Sponsor:  Sponsor27-must
--------------------------------------+-----------------------------------

Comment (by antonela):

 Replying to [comment:15 brade]:
 > We think we can achieve a good experience with option 2. We can prevent
 the notification prompt from disappearing until the user clicks "Cancel"
 or "Done" and we can customize the appearance as needed.


 All good. We should make sure that we are not mixing the password/auth
 flow. Maybe, we can achieve that by removing the key icon at the URL bar.

 We will not have an inline validation for user input errors; all the
 errors will render in an error page. Am I right?

 I'll work on the error page in the meantime. Do we have different errors?
 Which errors we are going to handle?

 Personally, I'd prefer to get closer to the HTTP auth standard instead of
 introducing a new user flow. If the doorhanger implementation is easier
 for doing it than the regular popup, it is good.


 [[Image(https://trac.torproject.org/projects/tor/raw-
 attachment/ticket/30237/30237-prompt.2.png, 700px)]]

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30237#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online