#711 Not obvious about how to change avatar
Closed: Fixed None Opened 8 years ago by jflory7.

When modifying your profile, it is unclear about how to edit or change your avatar. You can see the box on your public profile, but when navigating through settings, there is no place where "Profile picture" or similar is listed.

It can be assumed that Gravatar or Libravatar are being used, but this should be stated to the user (or better yet, give them an option to use a custom Gravatar / Libravatar email without changing their primary Pagure email).


Yes, pagure indeed does use libravatar!

I think a link, and an explainaition of this would be good to have in the user settings. (also, a preview of the avatar that is being pulled from libravatar too.)

IMHO, adding the ability to specify a different email just for the avatar might add even more confusion, as it is possible to add multiple emails to a libravatar account.

In some of our apps, in the profile page we linked to the libravatar website, so if you click on your avatar on your settings page you get redirected to the place where you can update/change it.

I took example on the fedora badges website, there is a button which sends you to libravatar using FAS.
I am not sure if we want to do the same or just have a link to libravatar.

https://pagure.io/fork/cverna/pagure/11eb33c4736434e6187fd7e67431141e9055bcdd

We can't do Fedora IDs as pagure is meant to be self-hostable, so we need another approach there

Yeah i thought so :bangbang: we could just use the button to redirect the user to https://www.libravatar.org/.

Or do we want something more than that ?

OH, we need to make it a form that POSTS to the login page with your fedora openid. By default, libravatar will ask you for your email, but that will take you to the wrong place.

@ralph, but what should we do for pagure instances not running w/ FAS?

Hm. Try to detect that, and just redirect to that login page normally if that's not the case.

Although -- perhaps I have this wrong. Is pagure using only users' email addresses to construct libravatar hashes?

@cverna badges: http://badges.fedoraproject.org/ has a "Change avatar" button that we may be able to adjust for our needs (ie: no openid, just use email-based avatar)

@pingou ,

I took http://badges.fedoraproject.org/ for example. Although when I try to do a POST request on https://www.libravatar.org/account/login/, I get a CSRF verification failed.

From what I understand, I would need to do a GET request first in order to have the CSRF token generated by libravatar then pass this token in the form I use to send the POST.
This would be needed if we want to fill the libravatar username with pagure's username.

Should I look at implementing this ?

Nah this sounds a little ugly, I think I'd rather just have a link then, doing two queries to go around a CSRF is... a little against the exact nature of CSRF :D

Login to comment on this ticket.

Metadata