scratch.mit.edu/logout :O

Yusei-Fudo

WHAT I'M SUGGESTING
It could be nice if there was a link that would just instantly signs you out WITHOUT USING scratch.mit.edu/abouta.

WHY SHOULD THIS BE ADDED
I sometimes like a shortcut when signing out so that I don't have to keep pressing sign out.

PROS
Nothing much, just to help speed up the process of logging out

CONS
I don't see any bad things about adding a link for signing out.

Not exactly the most necessary of things.

dhuls

It's literally 2 clicks.

Yusei-Fudo

dhuls wrote:
It's literally 2 clicks.

I'm on a touchpad (the type that you swipe around with your finger).

It's definitely faster for me to just type a few letters and then from my device's search history, find the logout link and that's that. It's much faster for me than 2 clicks.

dertermenter

I don’t really see a use for this - 2 clicks really doesn’t take long, even if this is faster for you. The scratch team shouldn’t add options to things that are already easy to do.

Jeffalo

Yusei-Fudo wrote:
CONS
I don't see any bad things about adding a link for signing out.

this means that any website would be able to embed https://scratch-mit-edu.ezproxyberklee.flo.org/logout as an image, and automatically log you out of Scratch. which isn't very cool.

thats why logout button in the navbar is a csrf protected form, and not just a link to https://scratch-mit-edu.ezproxyberklee.flo.org/accounts/logout/ (which 405s unless you make POST request).

mybearworld

Jeffalo wrote:
this means that any website would be able to embed https://scratch-mit-edu.ezproxyberklee.flo.org/logout as an image, and automatically log you out of Scratch. which isn't very cool.

Scratch already avoids that for abouta:

<!DOCTYPE html>
<html>
 <head>
  <title>Logout</title>
 </head>
 <body>
  <iframe src="https://scratch-mit-edu.ezproxyberklee.flo.org/abouta/">
 </body>
</html>

->

Last edited by mybearworld (Aug. 14, 2021 10:26:00)

TheQuackHouse

In my recent fourm topic I made, I learned the CSRF cookie protects you from malicious 3rd parties. If this isn't implemented, Scratch would be unsafe. Plus, there's a workaround. Just clear your cache or click Log Out. Simple.

Woops, I said what Jeffalo said

Last edited by TheQuackHouse (Aug. 14, 2021 11:26:26)

1492864

Yusei-Fudo wrote:
CONS
I don't see any bad things about adding a link for signing out.

One con is that someone might post a link like this:

[url=scratch.mit.edu/logout]Click me![/url]

and it signs you out.

Last edited by 1492864 (Aug. 14, 2021 11:31:14)

Tyler_nfs123

but 2 clicks really doesn’t take long

Yes 2 clicks is fast but he/she may forget to sign out sometimes which could result in his/her brother/sister using that account and getting banned unnecessarily

TheQuackHouse

By the way do many sites have . /logout?

290Scratcher

TylerMorgan123 wrote:
but 2 clicks really doesn’t take long
Yes 2 clicks is fast but he/she may forget to sign out sometimes which could result in his/her brother/sister using that account and getting banned unnecessarily

That point means nothing against the 2 clicks one.

Tyler_nfs123

290Scratcher wrote:
TylerMorgan123 wrote:
but 2 clicks really doesn’t take long
Yes 2 clicks is fast but he/she may forget to sign out sometimes which could result in his/her brother/sister using that account and getting banned unnecessarily
That point means nothing against the 2 clicks one.

What I meant was for pc users you know

290Scratcher

TylerMorgan123 wrote:
290Scratcher wrote:
TylerMorgan123 wrote:
but 2 clicks really doesn’t take long
Yes 2 clicks is fast but he/she may forget to sign out sometimes which could result in his/her brother/sister using that account and getting banned unnecessarily
That point means nothing against the 2 clicks one.
What I meant was for pc users you know

I still don't see how forgetting to sign out has any relation to 2 clicks not taking long, not to mention this doesn't have any relation to the original post.

mybearworld

1492864 wrote:
Yusei-Fudo wrote:
CONS
I don't see any bad things about adding a link for signing out.
One con is that someone might post a link like this:
[url=scratch.mit.edu/logout]Click me![/url]
and it signs you out.

Click me!

Yusei-Fudo wrote:
It's definitely faster for me to just type a few letters and then from my device's search history, find the logout link and that's that. It's much faster for me than 2 clicks.

Can't you put https://scratch-mit-edu.ezproxyberklee.flo.org/abouta/ in your search history too?

Last edited by mybearworld (Aug. 14, 2021 13:32:11)

CST1229

mybearworld wrote:
Yusei-Fudo wrote:
It's definitely faster for me to just type a few letters and then from my device's search history, find the logout link and that's that. It's much faster for me than 2 clicks.
Can't you put https://scratch-mit-edu.ezproxyberklee.flo.org/abouta/ in your search history too?

Or even better, just bookmark it? Maybe make a small bookmarklet that fetches abouta then does nothing with it and reloads the page instead?

Last edited by CST1229 (Aug. 14, 2021 14:05:06)

TheQuackHouse

Suggest to remove https://scratch-mit-edu.ezproxyberklee.flo.org/abouta for safety reasons

Last edited by TheQuackHouse (Aug. 14, 2021 14:07:24)

mybearworld

TheQuackHouse wrote:
Suggest to remove https://scratch-mit-edu.ezproxyberklee.flo.org/abouta for safety reasons

Abouta is a bug. Aboutscratch or about_scratch, or about works. I made a BaG topic about that once, I'll link it if I can find it. Edit: it wasn't mine, but here it is. But a very similar one is mine, they're probably related.

CST1229 wrote:
Or even better, just bookmark it? Maybe make a small bookmarklet that fetches abouta then does nothing with it and reloads the page instead?

javascript:fetch("https://scratch-mit-edu.ezproxyberklee.flo.org/abouta/").then(()=>location.reload())

Last edited by mybearworld (Aug. 14, 2021 21:48:39)

CST1229

mybearworld wrote:

javascript:fetch("https://scratch-mit-edu.ezproxyberklee.flo.org/abouta/").then(function(){location.reload();});void(0);

Shorter version:

javascript:fetch("https://scratch-mit-edu.ezproxyberklee.flo.org/abouta").then(()=>window.location.reload())

(Gotta shave off those bytes!)

Last edited by CST1229 (Aug. 14, 2021 15:18:32)

k7e

Use this.

CST1229

k7e wrote:
Use this.

That doesn't log you out.

Discuss Scratch