Beta Mode #1815

hstove · 2019-01-24T22:00:52Z

This PR adds a new 'mode' to the MacOS app to enable "Beta Mode". In Beta mode, all auth requests are redirected to https://develop--reporter-beaver-73821.netlify.com. We'll probably want to change this URL to something like beta.browser.blockstack.org before releasing this feature.

This URL is auto-built for every new commit to develop. So, as soon as new things are merged to develop, you can test them without having to run a local environment.

This is great for internal testing, but it's also helpful for end users who run into breaking bugs. Instead of having their Browser be in a broken state until we push a release, we can at least let them know that they can try beta mode as soon as we have a fix (with understandable precautions).

Testing: alt-click the icon and then enable Beta Mode. When beta mode is enabled, you shouldn't be able to enable dev mode, and vice versa.

This is built on top of #1803, because I needed that code to build and test a Mac app locally.

yknl · 2019-01-25T13:51:41Z

My only issue with this feature is that when switching to beta mode, it's essentially signing the user out and asking them to restore again. Because they probably have never signed into beta.browser.blockstack.org. And it might cause confusion if they've signed into different ID's on localhost and beta.browser.blockstack.org. One thing we can do is automatically signing the user out when switching between beta mode and normal mode.

aulneau · 2019-01-25T15:38:33Z

I wonder if there is a secure way to be able to transport the profile to the beta instance. We could send them to the link with the magic recovery code as a query, they'd just have to enter a password to restore. If they had previously logged in, the query param would just be ignored.

zone117x · 2019-01-25T15:39:52Z

This is a cool feature. Should come in handy for internal usage and getting some % of the community using beta mode for us.

Agreed with @yknl comment. If we login for them, should we have them confirm that they are moving their potentially real blockstack keys from a "secure" local installation to a potentially less secure web hosted browser?

hstove · 2019-01-28T16:26:19Z

Good feedback. OK - I'll update it so that, when you enable beta mode, you:

See a page on localhost:8888 that says "do you want to migrate your account to a beta version of the browser?" - maybe some copy explaining this
When you confirm, you are redirected to the beta URL with a param of the encrypted seed, so you can enter your password and it'll all be done.

hstove · 2019-02-25T23:20:56Z

@markmhx @jeffdomke @aulneau I could use some design help here. You see this when you first enable Beta mode:

What happens if you 'continue' is you get redirected to beta.browser.blockstack.org, with your encrypted seed as a URL parameter. You're prompted to enter your password to finish signing in to the beta version.

The copy is pretty janky. Any thoughts?

aulneau · 2019-02-26T14:30:33Z

I think it's generally fine, but the first thing I notice is it's asking if you want to continue, but it provides no way to not continue, eg a back or cancel button.

An alt proposal could be that when entered into beta mode, it can take you directly to the beta browser, with the enter password screen visible, and then that is the stage for them to determine if they want to continue or cancel.

markmhendrickson · 2019-02-28T16:38:34Z

If a user enables beta mode then disables it, will they retain their localhost session or does that get nuked upon the beta enable? I presume the former.

Here's how I'd recommend writing the copy to incorporate @zone117x's suggestion about hosted security as well:

Ready to enable Beta Mode?

By proceeding, your local Blockstack Browser will start redirecting all activity to a hosted version of the Browser at beta.browser.blockstack.org that runs the latest code on the develop branch.

Use it to test the latest code changes, but beware you'll have to authenticate your Blockstack ID again and you may encounter bugs. You also won't get any of the additional security benefits of using your local Browser until you disable beta mode.

And the buttons should be:

Yes, I'm ready (purple –> enables beta mode and redirects to hosted beta homepage, with confirmation message on that page?)
No (gray –> redirects to localhost homepage)

hstove · 2019-02-28T16:41:31Z

The thing is, since this 'beta mode' feature uses native MacOS code, there isn't really a way to turn it off from within the app. You can only turn it off and on in the menu bar (like using Dev mode).

So, I think the copy needs to be more like:

"You've enabled Beta Mode. From now on, Blockstack authentication requests will send you to beta.browser.blockstack.org. Would you like to securely log in using your current account?"

Continue -> go to beta and decrypt your key
No -> Beta is still enabled, but you won't be logged in

markmhendrickson · 2019-02-28T16:47:51Z

I see, so basically once they've chosen "Beta Mode" in the menu bar, it's enabled and the user just has to authenticate still.

How about this?

You've enabled Beta Mode

Your local Blockstack Browser will now start redirecting all activity to a hosted version of the Browser at beta.browser.blockstack.org that runs the latest code on the develop branch.

Use it to test the latest code changes, but beware you'll have to sign in with your Blockstack ID again below, and you may encounter bugs. You also won't get any of the additional security benefits of using your local Browser until you disable beta mode in the menu bar.

And the buttons should be the same as we have in the standard initial auth modal (for consistency):

hstove · 2019-02-28T16:50:30Z

I agree, except I don't think we should say:

You also won't get any of the additional security benefits of using your local Browser until you disable beta mode in the menu bar.

We don't indicate anywhere that the local build is 'more secure', and whether it is or not isn't crystal clear. It's mainly just "more decentralized".

markmhendrickson · 2019-02-28T16:54:31Z

Makes sense, how about just the following then for that paragraph?

Use it to test the latest code changes, but beware you'll have to sign in with your Blockstack ID again below, and you may encounter bugs. You can resume usage of your local Browser at any time by disabling beta mode in the menu bar.

moxiegirl · 2019-03-01T16:05:43Z

The tense "will now start redirecting" is very confusing. The beta is enabled it is redirecting -- present tense is now so you don't need the adverb and or the participle form. Clarity.

Your local Blockstack Browser is redirecting all activity to a hosted version of the Browser at beta.browser.blockstack.org . The hosted version runs code on the latest develop branch. Be aware you may encounter bugs and you won't get any of the additional security benefits of using a local Browser until you disable beta mode in the menu bar.

To disable beta mode, reset the browser and authenticate again.

It also seems pretty obvious Beta mode will be for testing or trying out. I don't think you need to state that here.

markmhendrickson · 2019-03-01T16:26:23Z

"is redirecting" makes me feel like the currently viewed page is going to redirect automatically. i.e. present tense makes the redirection a bit too immediate?

"will now redirect" maybe better? So that it has a sense of "going forward from now".

Separately per the last line in your copy suggestion, it appears the user won't have to authenticate again locally if they disable beta mode, though I may understand that wrong?

hstove · 2019-03-01T16:28:20Z

To disable beta mode, reset the browser and authenticate again.

No, it works by holding the option key and clicking the blockstack icon in the MacOS menu bar. Thats how you enable/disable it. You won't have to reset your browser when you turn it off/on.

moxiegirl · 2019-03-04T16:13:15Z

Your local Blockstack Browser is in beta mode. All activity from now on redirects to a hosted version of the Browser at beta.browser.blockstack.org . The hosted version runs code on the latest develop branch. Be aware you may encounter bugs and you won't get any of the additional security benefits of using a local Browser until you disable beta mode in the menu bar.

To disable beta mode, on Mac, hold ⌥ OPTION KEY and click the Blockstack icon in your MacOS menu bar.

@hstove is BETA mode only an option in Mac?

hstove · 2019-03-04T16:14:08Z

With this pull request, it is. We would need to do additional work on other platforms to mimic this.

zone117x · 2019-03-04T16:16:58Z

@moxiegirl

We would need to do additional work on other platforms to mimic this.

Would take like 15 min to add the same Windows context menu item - worries there.

…to feature/beta-mode

* develop: Added some additional Web Browser process start exception handling for unpredictable failure cases Implemented detection and redirection back to the originating web browser for the Windows app. Fix the blockstackProxy.js not listening on loopback interface which trigger Windows Firewall warnings/prompts. Fix problems caused by external protocolhandler.exe file: * Use main app binary for protocol handler registration. * Fix broken auth when Blockstack app is not already running. * Remove duplicate blockstack.ico file.

zone117x · 2019-03-08T19:08:56Z

Note to reviewers: this has been added to the Windows app as well

zone117x

This seems to be working great except for a bug I'm running into during the hand off to beta.browser.blockstack.org:

Click enable beta mode menu option.
Click "Sign in with your existing ID" on the http://localhost:8888/go-to-beta page
Enter password on the https://beta.browser.blockstack.org/seed?encrypted=... page.
Click through form, perform the Select words #x and #y step.
Click "Go To Blockstack".
End up back at the "Create your Blockstack ID" page.

(clear localStorage on beta.browser.blockstack.org to reproduce again).

zone117x · 2019-03-11T14:38:41Z

Will approve once we have #1863 merged and deployed to beta.browser.blockstack.org for testing (unless we want to merge this PR first).

I have a UX request: after the redirect handoff it should only require entering the password. Its pretty annoying to have to go through the flow designed for on-boarding which is:

Get redirected to new URL which shows the Save your Secret Recovery Key form. Click Secret Recovery Key.
Enter password click Next.
Now on Save all words form, click Continue.
Now on Select words #{x} and #{y} form, go to 1password, click reveal, count the words, click the buttons (worst step).
End up on Save your Secret Recovery Key form and click Go to Blockstack.

We could add a query param (like https://beta.browser.blockstack.org/seed?quick=1&encrypted=abc...) and skip all the on-boarding forms/steps.

Not a deal breaker at all for this PR, I can make a separate issue if necessary?

markmhendrickson · 2019-03-11T17:14:47Z

We decided during a review call to change the first button to "Create new ID or sign in" and remove the second one.

zone117x

Re-tested and works great.

yknl

thanks @hstove, looks good now

add 'beta mode' to MacOS menu

202bc2d

hstove requested review from zone117x and yknl January 24, 2019 22:00

markmhendrickson added this to the Sprint 2: Week 5-6 milestone Jan 28, 2019

markmhendrickson added the enhancement label Jan 28, 2019

markmhendrickson assigned hstove Feb 19, 2019

markmhendrickson modified the milestones: Sprint 2: Week 5-6, Sprint 3: Week 7-8 Feb 19, 2019

hstove added 4 commits February 25, 2019 15:33

eslint on routes page

59835c9

add 'go to beta' path which sends you to beta with encrypted seed

be07f9d

updates AppDelegate to /go-to-beta when enabling beta mode

ff07b86

merge 'develop' into 'feature/beta-mode'

116f9e6

This was referenced Feb 27, 2019

Explain how to run the BETA mode of the browse stacks-network/stacks-core#928

Closed

Explain how to run the BETA mode of the browse stacks-network/docs#154

Closed

Explain how to run the BETA mode of the browse stacks-network/docs#155

Closed

hstove and others added 4 commits March 7, 2019 12:52

Update copy on beta modal

cc735b0

Merge branch 'develop' of github.com:blockstack/blockstack-browser in…

dafb01d

…to feature/beta-mode

Implement beta mode option in Windows app

7ca1626

zone117x reviewed Mar 8, 2019

View reviewed changes

hotfix: fixes error on update page when state update needed

bd20165

This was referenced Mar 11, 2019

Fix for seed recovery from email #1863

Closed

[QA] Implement e2e test for account recovery URL #1864

Open

markmhendrickson modified the milestones: Sprint 3: Week 7-8, Sprint 5: Week 11-12 Mar 11, 2019

cleaned up go-to-beta, no sign in

8c5ccd9

zone117x approved these changes Mar 12, 2019

View reviewed changes

yknl approved these changes Mar 12, 2019

View reviewed changes

hstove merged commit 222080a into develop Mar 12, 2019

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Beta Mode #1815

Beta Mode #1815

hstove commented Jan 24, 2019

yknl commented Jan 25, 2019

aulneau commented Jan 25, 2019

zone117x commented Jan 25, 2019

hstove commented Jan 28, 2019

hstove commented Feb 25, 2019

aulneau commented Feb 26, 2019

markmhendrickson commented Feb 28, 2019

hstove commented Feb 28, 2019

markmhendrickson commented Feb 28, 2019

hstove commented Feb 28, 2019

markmhendrickson commented Feb 28, 2019 •

edited

Loading

moxiegirl commented Mar 1, 2019 •

edited

Loading

markmhendrickson commented Mar 1, 2019

hstove commented Mar 1, 2019

moxiegirl commented Mar 4, 2019 •

edited

Loading

hstove commented Mar 4, 2019

zone117x commented Mar 4, 2019

zone117x commented Mar 8, 2019

zone117x left a comment

zone117x commented Mar 11, 2019

markmhendrickson commented Mar 11, 2019

zone117x left a comment

yknl left a comment

Beta Mode #1815

Beta Mode #1815

Conversation

hstove commented Jan 24, 2019

yknl commented Jan 25, 2019

aulneau commented Jan 25, 2019

zone117x commented Jan 25, 2019

hstove commented Jan 28, 2019

hstove commented Feb 25, 2019

aulneau commented Feb 26, 2019

markmhendrickson commented Feb 28, 2019

hstove commented Feb 28, 2019

markmhendrickson commented Feb 28, 2019

hstove commented Feb 28, 2019

markmhendrickson commented Feb 28, 2019 • edited Loading

moxiegirl commented Mar 1, 2019 • edited Loading

markmhendrickson commented Mar 1, 2019

hstove commented Mar 1, 2019

moxiegirl commented Mar 4, 2019 • edited Loading

hstove commented Mar 4, 2019

zone117x commented Mar 4, 2019

zone117x commented Mar 8, 2019

zone117x left a comment

Choose a reason for hiding this comment

zone117x commented Mar 11, 2019

markmhendrickson commented Mar 11, 2019

zone117x left a comment

Choose a reason for hiding this comment

yknl left a comment

Choose a reason for hiding this comment

markmhendrickson commented Feb 28, 2019 •

edited

Loading

moxiegirl commented Mar 1, 2019 •

edited

Loading

moxiegirl commented Mar 4, 2019 •

edited

Loading