diff --git a/understanding/20/re-authenticating.html b/understanding/20/re-authenticating.html index 9684801e88..b22d0489bc 100644 --- a/understanding/20/re-authenticating.html +++ b/understanding/20/re-authenticating.html @@ -1,79 +1,74 @@ - + - + Understanding Re-authenticating - +

Understanding Re-authenticating

- +

In brief

Goal
Users do not lose information or context due to reauthentication.
What to do
Preserve users' prior activity and data through reauthentication.
-
Why it's important
Some people may require additional time to complete an activity.
+
Why it's important
Some people may require additional time to complete an activity.
- +

Intent of Re-authenticating

- - +

The intent of this success criterion is to allow all users to complete authenticated transactions that have inactivity time limits or other circumstances that would cause a user to be logged out while in the midst of completing the transaction.

-

For security reasons, many sites implement an authentication time limit after a certain period of inactivity. These time limits may cause problems for persons with disabilities - because it may take longer for them to complete the activity. + because it may take longer for them to complete the activity.

-

Other sites will log a person out of a session if a person logs in on the website from another computer or if other activities arise that make the site suspicious of whether the person is still the same legitimate person who logged in originally. When users are logged out while still in the midst of a transaction - it is important that they be given the ability to re-authenticate and continue with the transaction without the loss of any data already entered. -

- - +

Sites that implement session time limits and re-authentication requests are + still subject to the requirements of other criteria, such as + 2.2.1 Timing Adjustable. +

+

Benefits of Re-authenticating

- - + -
- +

Examples of Re-authenticating

- +
A shopping site checkout
-
A user with extremely limited use of the hands is logged into a shopping site. It - takes so long to enter credit card information into the application that a time limit - occurs while the user is performing the checkout process. When the user returns to - the checkout process and submits the form, the site returns a login screen to re-authenticate. +
A user is logged into a shopping site. While in the middle of the checkout process, the user + is interrupted and has to leave their computer. While they are away, the site prompts the user + that the process is about to time out, and offers the ability to extend the timeout – but with + the user away, the timeout is not extended and the user is logged out. When the user returns to + the computer, they have to re-authenticate. After the user logs in, the check out process is restored with the same information and at the same stage. The user did not lose any data because the server had temporarily accepted and stored the submission even though the session had timed out and restored @@ -85,94 +80,61 @@

Examples of Re-authenticating

remains intact and, after re-authentication, the user may send that data.
A questionnaire with a time limit
A long questionnaire provided within a single web page has information at the beginning - that indicates that the session will time out after 15 minutes. The user is also informed + that indicates that the session will time out after 20 hours. The user is also informed that the questionnaire can be saved at any point and completed at a later time. Within the web page there are several buttons provided to save the partially completed form. In addition, with JavaScript in the list of accessibility-supported content technologies that are relied upon, the user can elect to be alerted via a pop-up if the session is close to timing out.
-
- +

Resources for Re-authenticating

- -
- +

Techniques for Re-authenticating

- - +

Sufficient Techniques for Re-authenticating

- - + - +
- -

Refer to +

Refer to Techniques for Addressing Success Criterion 2.2.1 for techniques related to providing notifications about time limits. -

-
-
- +

Additional Techniques (Advisory) for Re-authenticating

- -
- +

Failures for Re-authenticating

- - + -
-
- diff --git a/understanding/20/timing-adjustable.html b/understanding/20/timing-adjustable.html index cf437542a3..55c44d26e8 100644 --- a/understanding/20/timing-adjustable.html +++ b/understanding/20/timing-adjustable.html @@ -1,13 +1,13 @@ - + - + Understanding Timing Adjustable - +

Understanding Timing Adjustable

- +

In brief

@@ -17,11 +17,10 @@

In brief

- +

Intent of Timing Adjustable

- - +

The intent of this success criterion is to ensure that users with disabilities are given adequate time to interact with web content whenever possible. People with disabilities such as blindness, low vision, dexterity impairments, and cognitive limitations may @@ -34,37 +33,30 @@

Intent of Timing Adjustable

limit occurs helps those users who require more time than expected to successfully complete tasks. These options are listed in the order that will be most helpful for the user. Disabling time limits is better than customizing the length of time limits, - which is better than requesting more time before a time limit occurs. + which is better than requesting more time before a time limit occurs.

- +

Any process that happens without user initiation after a set time or on a periodic basis is a time limit. This includes partial or full updates of content (for example, page refresh), changes to content, or the expiration of a window of opportunity for - a user to react to a request for input. + a user to react to a request for input.

- +

It also includes content that is advancing or updating at a rate beyond the user's ability to read and/or understand it. In other words, animated, moving or scrolling content introduces a time limit on a users ability to read content.

This success criterion is generally not applicable when the content repeats or is synchronized with other content, so long as the information and data is adjustable or otherwise under the control of the end user. Examples of time limits for which this success criterion is not applicable include scrolling text that repeats, captioning, and carousels. These are situations which do include time limits, but the content is still available to the user because it has controls for accessing it, as specified in 2.2.2 Pause, Stop, Hide.

In some cases, however, it is not possible to change the time limit (for example, for an auction or other real-time event) and exceptions are therefore provided for those cases.

- +

Content that operates on a timer does not need to be time adjustable if there is an alternative that does not rely on a timer. For example, a web application such as an email client provides notification of new email arriving with a temporary message (such as a 'toast' message) in the lower right-hand side of the interface, and the message disappears after 5 seconds. Users are able to identify the arrival of email through other means, such as viewing the Inbox, so the disappearance of the message does not set a time limit on the their ability to determine if new mail has arrived. If the user has no other means of discovering the same information (or performing the same function), then each message would need to meet this success criterion in order to provide users with sufficient time to access the information.

-

- - Notes regarding server time limits - -

- +

Notes regarding time limits

+ - +

In cases where timing is not an intrinsic requirement but giving users control over timed events would invalidate the outcome, a third party can control the time limits - for the user (for example, granting double time on a test). - -

- -

See also - 2.2.3: No Timing. -

- - + for the user (for example, granting double time on a test).

+ +

See also 2.2.3: No Timing.

+

Benefits of Timing Adjustable

- - + -
- +

Examples of Timing Adjustable

- - + - +
- +

Resources for Timing Adjustable

- -
- +

Techniques for Timing Adjustable

- - +

Sufficient Techniques for Timing Adjustable

- - +
-

Situation A: If there are session time limits:

- + - +
- +
-

Situation B: If a time limit is controlled by a script on the page:

- + - +
- +
-

Situation C: If there are time limits on reading:

- + -
-
- +

Additional Techniques (Advisory) for Timing Adjustable

-
- +

Failures for Timing Adjustable

- - + -
-
-