20 Nov 2015 Edited #1

Flyover development

Administrator
This is the checklist of Flyover's features which have been revisited or will undergo active development for the next version of Flyover.

- Suggestion: Disabling mybb login/registration in 1.6
- Feature request: disable unlinking from provider

Version 2.1 (released: 1 August 2019)


LOCK Fixed medium priority vulnerability. To ensure a responsible disclosure, it will not be disguised publicly. If you want to know more about this vulnerability, please PM me. Reported by Omniscient
BUG fast registration is breaking login and registration. Reported in Flyover 2.0 - GitHub Authentication not working

Version 2.0 (released: 2 April 2019)


FIRE code rewrite from the ground up
FIRE HybridAuth update to 3.0.0 RC9
SQUARED NEW custom scopes per every provider
SQUARED NEW new ACP panel
SQUARED NEW new redirect URI
SQUARED NEW new providers: GitLab, Mailru, Odnoklassniki, Spotify, WeChat, Yandex
SQUARED NEW new data point for synchronization: language
BUG Suggestion: Disabling mybb login/registration in 1.6

Version 1.5 (released: 8 May 2018)


BUG Fixed critical issues with MySQL Strict Mode
LOCK Fixed medium priority vulnerability. To ensure a responsible disclosure, it will not be disguised publicly. If you want to know more about this vulnerability, please PM me

Version 1.4.1 (released: 4 May 2018)


BUG Hotfix

Version 1.4 (released: 3 May 2018)


BUG Fixed privately-reported issues with certain environments

Version 1.3 (released: 1 Oct 2017)


FIRE HybridAuth update to version 2.9.6 with notable performance improvements
SQUARED NEW Custom Profile Fields support in registration page
SQUARED NEW Migrator from other plugins offering login capabilities, including MyFacebook Connect, MyTwitter Connect and Steam Login
SQUARED NEW Discord provider
BUG Redirection fix using MyFacebook Connect 3.4 code
BUG Multiple accounts support
BUG Fix No password
SQUARED NEW Added website and identifier as new data points you can choose to synchronize as part of a complete rewrite of data points handling, which will let easier additions in the future

Version 1.2 (released: 6 Dec 2015)


SQUARED NEW Who's Online support
SQUARED NEW Email and passwordless accounts support
SQUARED NEW Standardized identifiers
SQUARED NEW Added updater
BUG Warning in ACP when using 3 or less providers
BUG New users are registered with a number instead of a username if the one-click registration option is disabled

Version 1.1 (released: 25 Nov 2015)


BUG MyBB 1.6 support
BUG Popup mode out of the beta with closing support for errors
BUG Username synchronization option
BUG Registration was not working properly because the identifier was empty
BUG Registration PMs were not delivered by the right sender
BUG Registration messages were not displayed properly
BUG Settings were not updated properly
BUG StackExchange was not working due to missing decompression during response handling
leefish 23 Nov 2015 Edited
#2
Shade, I would very much like it to be able to specify an extra thing on setup.

I have a LOT of tumblr users, and in usercp I allow users to input their tumblr name and then it shows their last 5 photo posts on their profile. It would be very nice if in the ACP we could indicate if there is such a custom profile field and what to auto fill it with/offer as an option in the signup. Just to make it all seem more seamless.

Also, I have a big forum event starting on 1st December on my 1.6 forum; I expect a lot of visitors from tumblr, and I would like the 1.6 version of flyover to be ready, ideally with this extra as above,but at least as is but for 1.6 and ready to deploy on my mainsite on that day. Assume 2 days testing on my test site.

I am willing to pay an additional 20 euro to have the 1.6 version ready for that test date, and of course available to all users of flyover.
Shade 23 Nov 2015
#3
Hi leefish,
I am putting a lot of efforts into Flyover and I will surely release a 1.6 version as soon as possible, given you are in a hurry.

If I'm not mistaken, you're basically asking for Custom Profile Fields support in the registration page. Am I right? This was planned also for the My* Connect serie but I never managed to get over it, and this seems the right occasion.

Concerning the 1.6 version, I am currently in a sort of "trouble" because I don't know what to do: the biggest concern is about the popup mode which exploits the global_intermediate hook to load its templates before the headerinclude template gets eval()'d. In 1.6 we don't have anything that allows this, so the only solution would be loading them in the global_start hook, where templates haven't been cached yet (= slight lack of performances). But that's most probably what I will do. If you have some suggestions, feel free to write them down!
leefish 23 Nov 2015
#4
What is popupmode? Is this for the front end login box?I think that the correct option is to use the globalstart hook. Its a small performance loss, but isnt a killer right?
Shade 23 Nov 2015
#5
Precisely. It isn't a killer.
leefish 23 Nov 2015
#6
Regarding this custom profilefield. I would have it in the usercp, as part of the synchronisation options, not in the registration page, as it is really only very useful if the user is synchronising the account.

Also, I see there is a user here called Lee Fish. That will be me as I dont use the same email everywhere, so when I ran a test I ended up with a new user being created here instead of being added to my account. I cant really think of a way round that.
Shade 23 Nov 2015
#7
Sorry about the duplicated account, it has been deleted. Some providers might not work here because most of the applications point to another URL, but they will be updated in the next couple of days.

Regarding the UCP custom profile field, I haven't understand what's your request still. Could you elaborate it deeper? I am not an English-native speaker as you may already know and sometimes I need simpler words or clarifications. Thank you.
leefish 23 Nov 2015 Edited
#8
:0

I have a custom profile field I added for users of tumblr. With this profile field filled in then on a user's profile you can see their last 5 tumble posts. I have the same thing for their twitter, where on the profile you can see their last tweet.

If I am using flyover and I allow users to login with tumblr then it would be nice when they chose to register with tumblr that the field was filled in. I dont want it on my registration page, because 1) it clutters my signup page and 2) not all users who sign up have a tumblr account.

I dont mind if they follow the standard flyover process to signup (as now), but in the usercp, where we can choose to synchronise the account, I would like that to have an input field for the custom profile field, or something that works like it.

Does that help?
Shade 23 Nov 2015 Edited
#9
Alright. I might not add an input field in Flyover's UCP page, as this looks like a customization that not every board might appreciate, but I can add an automatic filler controllable from Flyover's ACP settings page that, upon synchronization, might add the username of the currently-in-use provider to a specified custom profile field. Does this sound good to you?
leefish 23 Nov 2015
#10
Yes, here is a pic:



  • That is the value I would like to be able to insert. I think this might work well with other signons like for example Steam.