Jump to content

Forum Software Update


Recommended Posts

I'll cover some of the changes on this thread.

First up: Security

When using 2 Factor Authentication, members can now choose Authy as an authentication handler.

Authy can send a user a text message, make a phone call, or send a push notification to a smartphone app to authenticate the user. 

 

Set Up

To set up Two Factor Authentication with Authy, the user will enter their phone number. To verify their phone number they will then enter a code shown in the Auhy app or have a code sent by text message or phone call. 

Authy Setup with App.png

Setting up Authy with the app available as an option

Authy Setup without App.png

Setting up Authy with just phone or text message options enabled

 

Verification with Authy

When the user needs to verify their account, the system will automatically show an appropriate interface. If you allow verification with the Authy app and either it is the only option you allow, or the system knows that the user has installed the Authy app, the system will prompt them to use the app. This can either be done using Authy's OneTouch option (where the user will receive a push notification to the app, and when they click approve, the screen will automatically refresh) or their SoftToken option (where the user will be instructed to open the Authy app and enter the code they see). If you allow authentication by text message and/or phone call as well, the user will also see options for using those instead.

These screenshots show the process for OneTouch authentication:

Authy OneTouch Pending.png

The user is shown a waiting screen

Authy OneTouch Notification.PNG Authy OneTouch Approval.PNG

Simultaneously they will receive a push notification and when opening it be able to approve

Once the user has approved, the waiting screen will automatically refresh with the user authenticated.

For SoftToken authentication, the user is prompted to enter the code shown in the Authy app:

Authy SoftToken Authentication.png

Authy SoftToken option

 

Phone Verification

If you have disabled the Authy app as an option, or the user does not have it installed, they will be prompted to choose from the available options how they want to authenticate.

These screenshots show the process for authenticating by text message:

Authy Verification Options.png

The user is asked how they want to authenticate

Authy SMS Codr.PNG

The user receives a text message or phone call with a code

Authy SMS Verification.png

The user enters this code to authenticate

 

Management

If the user changes their phone number they can reconfigure the system in their account settings. The system automatically shows "Phone Verification" rather then "Authy" if the app is not available as an option.

Authy Account Settings.png

Account Settings showing Authy as Phone Verification

 

 

 

 

Link to comment
Share on other sites

Also related to Security:

Notification of a new device sign in

If enabled, users can receive an email notification when a new device is used to log into their account:

Screen Shot 2017-03-14 at 17.47.55.png

Email sent when a login from a new device is detected

When a user signs in for the first time, a special key is set to recognise the browser on subsequent logins. This mean the notification email does not trigger on a new IP address, which would be annoying when travelling or if using a network where the IP address changes regularly. Instead, the notification is only triggered if someone signs into your account from a new physical device or web browser.

 

UserCP Device Management

If enabled, a new page will show in the user's settings page showing all the devices which have been used to log into their within the last 90 days (which is recent enough that could still be logged in if "Remember Me" was checked).

Recently Used Devices.png

Recently Used Devices

Users can see the device, browser, physical location (obtained by a GeoIP lookup) and if applicable, how the login was processed (for example, if the sign in was with Facebook or Twitter, this will show). If they chose "Remember Me" when logging in, they can undo that (handy if you realise you accidentally left yourself signed in on a public computer).

If they see anything they don't recognise, a page to walk them through the necessary steps to re-secure their account is available.

Screen Shot 2017-03-14 at 17.00.06.png

 

Link to comment
Share on other sites

FILE UPLOADING

 

IPS Community Suite has supported drag and drop uploading to the attachments area at the bottom of the editor since 4.0. In 4.2 we're pleased to add the ability to drag and drop right into the editor, so you can drop your attachment exactly where you want it to show without having to add it afterwards.

Drag and Drop.gif

Drag and drop into editor

If your browser and OS supports it you can also copy and paste, either from the desktop or from other content on the web:

Copy and Paste.gif

Copy and Paste

Naturally this works for ordinary files as well as images:

File.gif

Drag and drop a file

 

Link to comment
Share on other sites

REACTIONS

 

 

IPS Community Suite has long had a reputation system; first we had a simple up/down system, later updated to introduce a Likes system as an alternative. Whichever system you chose to use, it tied in with our reputation system.

We're pleased to introduce the latest updates to the reputation system, and it's something that has been requested for quite some time: Reactions.

Quite simply, reactions allow users to offer more fine-grained sentiments towards content than a simple up/down or 'like'. They are now in common usage on social networks, and so users expect to be able to be more nuanced in their response to something they see.

Let's see how they work in a post, and then cover the options you'll have available.

reactions.gif

What you see above is the default setup for a site that has used the Like system in version 4.1. We include 5 reactions by default:

  • Like
  • Thanks
  • Confused
  • Sad
  • Haha

If you currently use the older style up/down reputation system, don't fret - you'll still get the new reactions on upgrade, but they'll be disabled by default and instead the new reaction UI will show up/down reactions. This gives you the flexibility to decide which of the new reactions, if any, you want to allow.

So, those are the basics - but what configuration options can you expect to see? First, you can of course add your own reactions! We expect that beyond the default reactions you'd expect to find, some sites will want reaction types specific to their use-case. On an intranet, you might want to have 'agree' and 'disagree' reactions for staff to use when responding to discussions. On a gaming community, you might replace the icons to be some graphic from a video game that means something to your particular userbase. There's a wealth of possibilities.

Each reaction you set up can be configured to adjust the original author's reputation count - a reaction can be positive (i.e. award a reputation point), negative (i.e. subtract a reputation point), or neutral (i.e. leave the reputation count unchanged). Our default set won't include any negative reactions, but you are free to configure these and new reactions to suit your own use-case. A user's total reputation count is still shown alongside their content and in their profile, of course.

If you don't want to use the new reactions for whatever reason, you can disable all of them except Like, and it'll behave just the like 4.1-and-earlier system:

react_like.gif

 

Sites that currently use the up/down system don't show a list of names of users, and instead show an overall reputation score for the content. With the new reaction system, you can enable this even if you don't use up/down reactions. This is great if you plan to use reactions as, for example, an agree/disagree system, or where the content score is more important to your site than the individual reaction types.

reaction count.png

How the reaction UI looks with the 'count only' setting enabled

As you'd expect, you can click individual reaction counts (or the overall reputation score, if you enable that setting) to view who reacted to the content. This remains a permission setting that you can apply per-group.

react who.png

On touch devices, on-hover functionality is not suitable, and so for these devices the reactions UI looks like this:

react_mobile.gif

Reactions play well with all areas of the suite, including Recommended Replies:

react_recommend.png

...and activity streams...

react_activity.png

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...