https://bugs.kde.org/show_bug.cgi?id=423668

            Bug ID: 423668
           Summary: Login password can be mistakenly entered after logging
                    in
           Product: kscreenlocker
           Version: unspecified
          Platform: Other
                OS: Linux
            Status: REPORTED
          Severity: major
          Priority: NOR
         Component: greeter
          Assignee: plasma-b...@kde.org
          Reporter: and...@aobuchow.com
                CC: bhus...@gmail.com
  Target Milestone: ---

SUMMARY
This has happened multiple times and is causing grief:
I lock my KDE Plasma session, walk away, come back and input my login password
+ hit enter while the screen is still black.

The expected result is that my password was inputted for the login screen
*only*. What actually occurs is that I'm logged in and the password is inputted
into the application that has focus.

This is incredibly problematic if the user has a chat application focused,
especially one that does not allow deleting sent messages. 

I haven't been able to find the exact steps to reproduce yet: I'm not sure yet
if the nature of the bug is technical or design (or user).

It could be that:
1. Somehow the last-focused application is receiving keyboard input while
locked. This is unlikely. 
2. There isn't enough feedback regarding a successful login when the screen is
"waking up" (restoring from a black screen). 

I think 2 might be the root cause:
When the session is locked and the screen is dimmed/blacked out, the login
password can be successfully entered *before* the screen has recovered from
being blacked out. In this scenario, the user never sees the lock/login screen,
and instead, their desktop is shown after the screen recovered from being black
out. 

Maybe all that needs to be changed to address this is to decrease the time it
takes for the screen to recover from being blacked out once locked. This would
allow the user to see instantly that they're typing in their password into the
login screen (and not an application on their desktop).

Alternatively, maybe the password input text box should only be enabled when
the screen is not blacked out.

I'm not sure if these suggestions are flawed, but I hope they help explain the
possible nature of the issue

STEPS TO REPRODUCE
1. Lock the desktop
2. Let the screen automatically switch off/darken (the time this takes can be
modified in System Settings >> Hardware >> Energy Saving >> Screen Energy
Saving 
3. Type in the session login password quickly and hit enter 

OBSERVED RESULT
The lock screen won't be shown when the screen recovers from being blacked out.
Instead, the user will be presented with their desktop. 

Again, if the screen instantly recovered from being blacked out, the user
wouldn't have the time to enter their password before the screen recovers.
Thus, they'd have visual confirmation that they are indeed entering their
password on the login screen and not some application on the desktop.


EXPECTED RESULT
The user is presented with the lock screen confirming they are logged in (or
typing their password into the password field). In any case, the user should be
shown the login screen before their desktop.

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Fedora 32
KDE Plasma Version: 5.18.5
KDE Frameworks Version: KDE Frameworks 5.70.0
Qt Version:  Qt 5.14.2 (built against 5.14.2)

The bug's behavior is different but it could be related to: Bug 423063 

ADDITIONAL INFORMATION
I love KDE Plasma!!! It's my favorite desktop ever :) Sorry if I posted this
bug for the wrong product/component, it's my first KDE bug.

Thank you so much!

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to