Umbraco-cms: v8: Login screen should ask for email not username

[mattbrailsford]

In v8 users appear to no longer have a username, instead they log in using their email.

With that in mind, the login screen should be updated so it asks for email + password, rather than username + password.

[kjac]

@mattbrailsford you can change this in usernameIsEmail in umbracoSettings.config:

When it's false the user editor looks like this:

That being said it would probably make sense to change Username to Email if it's set to true (default), even if there are slight (tiny) security implications of doing so. I'll have a look at a PR soon.

[kjac]

PR in #4383

[mattbrailsford]

Ahh, didn't know about the config option. PR #4383 looks a good solution. 👍

[nul800sebastiaan]

Problem is.. this config option might have been switched from true to false along the way, so now we have old users with a non-email username and new users that use their email as their username. The default has been email for new installs for a year and a half now and people seem to have gotten used to this and find the placeholder text acceptable. The email is still a username, albeit in an email format.

Anyway, all this to say: I don't know if this needs changing, I'll have to discuss with the team soon, will get back to you!

[kjac]

It's not a critical change for sure 😊 but it goes nicely with the whole "don't make me think" strategy.

[nul800sebastiaan]

Also what if the username that you've set up IS already an email address. Then you'd "make me think" about whether I forgot to create a username.. ;)

[nathanwoulfe]

Why not both? Plenty of services allow logging in via email or username, and removes the burden from the user to remember whether the email was their username and vice-versa.

[kjac]

@nathanwoulfe @nul800sebastiaan I think what @mattbrailsford is getting at here is ... if Umbraco is configured to use email as username, you can't use anything else. The email property is set on the user, separately from the username, and setting usernameIsEmail to true efficiently disregards the username property.

As is the login screen shows "Username" and "Your username is usually your email" in an attempt to help the user. #4383 changes that to "Email" and "Enter your email" if you really can't log in with anything but your email.

[nul800sebastiaan]

Fixed in https://github.com/umbraco/Umbraco-CMS/pull/4383