User sees Captcha after successful registration

[michi.schwarz@…]

I already ​reported this issue on the SpamFilter component of Trac but was told that I is probably an issue of AccountManagerPlugin. Here is the original text of the linked issue:

I've found a sequence of steps a user might follow when registering a new account using the AccountManagerPlugin where the user ends up on the /captcha resource after the first login. This may lead the user to believe that they need to solve another captcha, even though it is not required. I think this may confuse the user (it did that to me, when testing a newly set up instance).

I've set up a new instance with Trac 1.0.2 and installed TracAccountManager 0.4.3 and TracSpamFilter 1.0.6dev (the former two are provided by Debian 8.3). I've configured the AccountManagerPlugin to require Email verification as well as a captcha to be solved for new registrations:

[account-manager]
register_check = BasicCheck, EmailCheck, RegExpCheck, UsernamePermCheck, RegistrationFilterAdapter

I've configured the TracSpamFilter to always require a captcha by setting Karma assigned to registering users to -1 and By how many points a successful CAPTCHA response increases the overall score to 1.

Now, a new user might follow the following steps:

1. Click on register in the metanav.
   • This opens /register.
2. Enter a user name, password an email address and click on Create account.
   • This opens /captcha and displays Submission rejected as potential spam as the error message.
3. The user solves the captcha correctly and clicks on Submit.
   • This opens /login and displays the message Your username has been successfully registered but your account still requires activation. Please login as user test7, and follow the instructions.
4. The user enters their login data and clicks Login.
   • This logs the user in and redirects them back to /captcha. At the top the message An email has been sent to with a token to verify your new email address is displayed while at the bottom a captcha is displayed.

At this point, the user might be convinced that they need to solve the displayed captcha. But solving the captcha will just display another one.

Is there a way to change the interaction of TracAccountManager and TracSpamFilter to e.g. display the /wiki resource when following an account creation directly by logging in?

[Ryan J Ollos]

In 16874:

TracAccountManager 0.5dev: Don't redirect to /captcha on login

Fixes #12652.