From 4c1bc505a9d3e0764b3ca12d8d8ec84283158312 Mon Sep 17 00:00:00 2001 From: Shawn Thompson Date: Fri, 13 Jan 2023 10:57:26 -0500 Subject: [PATCH 1/3] add email and password technique for 3.3.7 related to #1916 --- techniques/html/authentication.html | 72 +++++++++++++++++++ .../22/accessible-authentication.html | 2 +- 2 files changed, 73 insertions(+), 1 deletion(-) create mode 100644 techniques/html/authentication.html diff --git a/techniques/html/authentication.html b/techniques/html/authentication.html new file mode 100644 index 0000000000..0ba405b132 --- /dev/null +++ b/techniques/html/authentication.html @@ -0,0 +1,72 @@ + + + + + Providing a properly marked up email and password inputs + + + + +

Providing a properly marked up email and password inputs

+
+

Metadata

+

3.3.7 Accessible Authentication

+

Sufficient

+
+
+

Applicability

+

Technologies that support authentication.

+
+
+

Description

+

The objective of this technique is to provide examples of properly marked up email and password inputs. This technique involves providing form mechanism where the user can enter their email address and password to log into the website.

+

Browsers and password managers generally use the accessible name of the input to determine how to fill it in.

+
+
+

Examples

+
+

properly marked up email and password inputs

+

A secure website has an email and password based login form.

+ 
+
+<form method="post" action="login">
+ <div>
+   <label for="email">Email</label>
+   <input id="email" type="email" autocomplete="email" ... >
+  </div>
+  <div>
+    <label for="password">Password</label>
+    <input id="password" type="password" autocomplete="current-password" ... >
+  </div>
+    <input type="submit" value="Login" >
+  </div>
+</form>
+
+
+
+
+
+

Tests

+
+

Procedure

+

For websites which require users to login with an email and password only:

+
    +
  1. Check that each input for authentication includes an appropriate accessible-name.
    2. +
+
+
+

Expected Results

+
    +
  • #1 is true.
    • +
+
+
+
+

Resources

+ +
+ + + diff --git a/understanding/22/accessible-authentication.html b/understanding/22/accessible-authentication.html index b0bb2141e0..400251ac88 100644 --- a/understanding/22/accessible-authentication.html +++ b/understanding/22/accessible-authentication.html @@ -126,7 +126,7 @@

Sufficient Techniques for Accessible Authentication

Email link authentication
  • - Providing a properly marked up email and password inputs (Potential future technique) + Providing a properly marked up email and password inputs
  • Providing WebAuthn as an alternative to username/password (Potential future technique) From 25cafe53674522a6efdda08cec5ad9dfa89a05c1 Mon Sep 17 00:00:00 2001 From: Shawn Thompson Date: Wed, 18 Jan 2023 10:56:58 -0500 Subject: [PATCH 2/3] fixed title for technique --- techniques/html/authentication.html | 4 ++-- understanding/22/accessible-authentication.html | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/techniques/html/authentication.html b/techniques/html/authentication.html index 0ba405b132..cffd1e723b 100644 --- a/techniques/html/authentication.html +++ b/techniques/html/authentication.html @@ -2,12 +2,12 @@ - Providing a properly marked up email and password inputs + Providing properly marked up email and password inputs -

    Providing a properly marked up email and password inputs

    +

    Providing properly marked up email and password inputs

    Metadata

    3.3.7 Accessible Authentication

    diff --git a/understanding/22/accessible-authentication.html b/understanding/22/accessible-authentication.html index 400251ac88..9b3e6ef636 100644 --- a/understanding/22/accessible-authentication.html +++ b/understanding/22/accessible-authentication.html @@ -126,7 +126,7 @@

    Sufficient Techniques for Accessible Authentication

    Email link authentication
  • - Providing a properly marked up email and password inputs + Providing properly marked up email and password inputs
  • Providing WebAuthn as an alternative to username/password (Potential future technique) From 8e572a0d4aa1ad49bf91c9c014a487d87edf5db3 Mon Sep 17 00:00:00 2001 From: Alastair Campbell Date: Wed, 1 Feb 2023 13:52:23 +0000 Subject: [PATCH 3/3] Adding check agreed in the meeting. --- techniques/html/authentication.html | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/techniques/html/authentication.html b/techniques/html/authentication.html index cffd1e723b..9489ab5cf7 100644 --- a/techniques/html/authentication.html +++ b/techniques/html/authentication.html @@ -52,12 +52,13 @@

    Procedure

    For websites which require users to login with an email and password only:

    1. Check that each input for authentication includes an appropriate accessible-name.
      2. +
    2. Check that each input for authentication allows pasting.

    Expected Results

      -
    • #1 is true.
      • +
    • #1 and #2 are true.