Finish changing user-facing login templates to use Social Login

Did a sweep through docs and made some wording improvements.

Author: jwag956

docs/api.rst

@@ -290,7 +290,8 @@ sends the following signals.
 
 .. data:: user_unauthenticated
 
-   Sent when a user fails to authenticate. It is sent from the `default_unauthn_handler`.
+   Sent when a user accesses a protected endpoint but isn't properly authenticated.
+   It is sent as part of the `default_unauthn_handler` (:meth:`.Security.unauthn_handler`)
    It is passed the app (which is the sender).
 
     .. versionadded:: 5.4.0

docs/configuration.rst

@@ -172,7 +172,7 @@ These configuration keys are used globally across all features.
 
 .. py:data:: SECURITY_REDIRECT_BEHAVIOR
 
-    Passwordless login, confirmation, reset password, unified signin, change_email, and OAuth signin
+    Passwordless login, confirmation, reset password, unified signin, change_email, and Social Login
     have GET endpoints that validate the passed token and redirect to an action form.
     For Single-Page-Applications style UIs which need to control their own internal URL routing these redirects
     need to not contain forms, but contain relevant information as query parameters.
@@ -225,7 +225,7 @@ These configuration keys are used globally across all features.
 .. py:data:: SECURITY_REDIRECT_BASE_DOMAIN
 
     Set the base domain for checking allowable redirects. The intent here is to
-    allow an application to be server on e.g. "flaskapp.my.org" and redirect
+    allow an application to be served on e.g. "flaskapp.my.org" and redirect
     to "myservice.my.org" (which maybe isn't a Flask app). Flask's SERVER_NAME
     can't be used to verify redirects in this case. Note that in most cases
     the application will want to set Flask's SESSION_COOKIE_DOMAIN to be this base domain -
@@ -422,6 +422,7 @@ These configuration keys are used globally across all features.
         - :py:data:`SECURITY_WAN_DELETE_URL`
         - :py:data:`SECURITY_MULTI_FACTOR_RECOVERY_CODES`
         - :py:data:`SECURITY_CHANGE_EMAIL_URL`
+        - :py:data:`SECURITY_CHANGE_USERNAME_URL`
 
     This can also be used to protect application endpoints with the :meth:`flask_security.auth_required` decorator.
 

flask_security/core.py

@@ -2023,7 +2023,7 @@ def unauthz_handler(
         Can raise an exception if it is handled as part of
         flask.errorhandler(<exception>)
 
-        With the passed parameters the application could deliver a concise error
+        With the passed parameters, the application could deliver a concise error
         message.
 
         .. versionadded:: 3.3.0
@@ -2038,7 +2038,8 @@ def unauthn_handler(
         cb: t.Callable[[list[str], dict[str, str] | None], ResponseValue],
     ) -> None:
         """
-        Callback for failed authentication.
+        Callback when a protected endpoint is accessed without the required
+        authentication.
         This is called by :func:`auth_required`, :func:`auth_token_required`
         or :func:`http_auth_required` if authentication fails.
         It is also called from Flask-Login's @login_required decorator.
@@ -2053,7 +2054,8 @@ def unauthn_handler(
         ``flask.errorhandler(<exception>)``
 
         The default implementation will return a 401 response if the request was JSON,
-        otherwise will redirect to the `login` view.
+        otherwise will redirect to the `login` view. In addition, the
+        :data:`user_unauthenticated` signal is sent.
 
         .. versionadded:: 3.3.0
 

flask_security/decorators.py

@@ -50,7 +50,10 @@
 
 
 def default_unauthn_handler(mechanisms=None, headers=None):
-    """Default callback for failures to authenticate
+    """Default callback when a protected endpoint is accessed without the required
+    authentication.
+
+    The :data:`user_unauthenticated` signal is sent.
 
     If caller wants JSON - return 401.
     If caller wants BasicAuth - return 401 (the WWW-Authenticate header is set).

flask_security/templates/security/login_user.html

@@ -30,11 +30,11 @@ <h2>{{ _fsdomain("Use a Passkey to Sign In") }}</h2>
   {% endif %}
   {% if security.oauthglue %}
     <hr class="fs-gap">
-    <h2>{{ _fsdomain("Use Social OAuth to Sign In") }}</h2>
+    <h2>{{ _fsdomain("Use Social Login to Sign In") }}</h2>
     {% for provider in security.oauthglue.provider_names %}
       <div class="fs-gap">
         <form method="post" id="{{ provider }}_form" name="{{ provider }}_form">
-          <input id="{{ provider }}" name="{{ provider }}" type="submit" value="{{ _fsdomain('Sign in with %(provider)s', provider=provider) }}" formaction="{{ url_for_security('oauthstart', name=provider) }}{{ prop_next() }}">
+          <input id="{{ provider }}" name="{{ provider }}" type="submit" value="{{ _fsdomain('Continue with %(provider)s', provider=provider) }}" formaction="{{ url_for_security('oauthstart', name=provider) }}{{ prop_next() }}">
           {% if csrf_token is defined %}
             <input id="{{ provider }}_csrf_token" name="{{ provider }}_csrf_token" type="hidden" value="{{ csrf_token() }}">
           {% endif %}

flask_security/templates/security/us_signin.html

@@ -32,11 +32,11 @@ <h2>{{ _fsdomain("Use a Passkey to Sign In") }}</h2>
   {% endif %}
   {% if security.oauthglue %}
     <hr class="fs-gap">
-    <h2>{{ _fsdomain("Use Social OAuth to Sign In") }}</h2>
+    <h2>{{ _fsdomain("Use Social Login to Sign In") }}</h2>
     {% for provider in security.oauthglue.provider_names %}
       <div class="fs-gap">
         <form method="post" id="{{ provider }}_form" name="{{ provider }}_form">
-          <input id="{{ provider }}" name="{{ provider }}" type="submit" value="{{ _fsdomain('Sign in with %(provider)s', provider=provider) }}" formaction="{{ url_for_security('oauthstart', name=provider) }}{{ prop_next() }}">
+          <input id="{{ provider }}" name="{{ provider }}" type="submit" value="{{ _fsdomain('Continue with %(provider)s', provider=provider) }}" formaction="{{ url_for_security('oauthstart', name=provider) }}{{ prop_next() }}">
           {% if csrf_token is defined %}
             <input id="{{ provider }}_csrf_token" name="{{ provider }}_csrf_token" type="hidden" value="{{ csrf_token() }}">
           {% endif %}