[wp-trac] [WordPress Trac] #34084: Automatically log user in after installation

[WordPress Trac]

#34084: Automatically log user in after installation
-------------------------------------------------+-------------------------
 Reporter:  johnbillion                          |       Owner:
     Type:  enhancement                          |  johnbillion
 Priority:  normal                               |      Status:  assigned
Component:  Upgrade/Install                      |   Milestone:  4.7
 Severity:  normal                               |     Version:
 Keywords:  has-patch ux-feedback needs-testing  |  Resolution:
                                                 |     Focuses:
-------------------------------------------------+-------------------------
Changes (by johnbillion):

 * keywords:   => has-patch ux-feedback needs-testing
 * owner:   => johnbillion
 * status:  new => assigned


Comment:

 I've been playing around with this behaviour for a few days and I now have
 a patch.

 [attachment:34084.patch] does the following:

 * Logs the user in and redirects them to the admin area as soon as
 WordPress is installed.
 * Falls back to displaying the existing "Success!" message if headers have
 been sent (eg. from a malformed `wp-config.php`, see #36215) which would
 otherwise result in a white screen of death.
 * Correctly populates the fallback value for `COOKIEHASH` during
 bootstrap, which is otherwise an empty string during installation (due to
 lack of a `siteurl` option). This allows the correct cookie to be set when
 logging the user in.

 What needs testing:

 * '''Password managers:''' I've been testing with 1Password. If you save
 your login when prompted to, then your credentials are correctly presented
 when subsequently visiting the login screen. One thing to note is that the
 form field names on the installation screen differ from those on the login
 screen, so some password managers may not deal with this so well.
 Installation and subsequent login should be tested with other password
 managers such as LastPass, KeePass, and Dashlane, and built-in browser
 password managers (Chrome, Firefox, Edge) on desktop and mobile. The
 intent here is to ensure that password management works equally well as it
 does now, given that the form fields have different names. I'm 99% sure
 it'll be ok.
 * '''Welcome screen:''' The "Welcome to WordPress!" panel on the dashboard
 is now the first thing people see after installing WordPress. It takes the
 place of the "Success!" message. Does this panel need further improvement
 for UX purposes? (If so, it should probably go into a separate ticket.)
 See also the focus on NUX.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34084#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform