Remove CCID from CCGN website

[hugosolar]

Problem

CCID has many issues and we are in a place where we can just remove it. I'd list some of those issues

• RubyCas (the server behind CCID) is abandoned (the last commit was 2015-12-09) so that is a potential security risk
• creativecommons/commoners: plugins/cas-maestro is the WordPress plugin for the Single Sign On process is a modified version of this CAS Maestro plugin which hasn't been updated since 2014-11-04, this is a potential security risk and an eventual compatibility problem with the newest WordPress versions
• We have deprecated CCID integration:
  • CCID integration with CreativeCommons.org was removed 2022-02-09
  • CCID integration with wiki.creativecommons.org removal TBD
• There's a lot of issues related to CCID problems
  • Log In link is confusing if you have a CCID but are not a CCGN member commoners#339
  • CCID login takes very long commoners#408
  • error registering CCID commoners#424
  • [Bug] Site navigation broken after CCID login commoners#436
  • [Bug] User unable to see vouching requests commoners#438

Process

Removing CCID will involve:

• Checking user workflow to check if login.creativecommons.org is hardcoded in the Global Network plugin
• Sending notification to CCGN users regarding upcoming password change
• Removing WordPress Plugin
• Sending notification to CCGN users to update their passwords

Additional context

@Juliabrungs told me this is also an opportunity to check how many active users we currently have

Implementation

• I would be interested in implementing this feature.

[possumbilities]

Revised Process - as of 2023.04.27

Removing CCID will involve:

• Check user workflow to check if login.creativecommons.org is hardcoded in the Global Network plugin
• Coordinate with Comms on plan for communication and removal
• Gather means to message all CCGN users since Google Group list is not current / make Google Group current
• Gather means to bulk reset passwords (likely same list as bulk notification in Google Group)
• Send notification to CCGN users regarding upcoming password change
• Wait 7 business days
• Deactivate CCID WordPress Plugin
• Bulk reset users' passwords without notification
• Verify reset and access works via regular WordPress login pathways
• Wait 24hrs
• Remove WordPress Plugin

[possumbilities]

there were two hiccups.

1. I think the sort added into the create_users_file.sh took the final empty line and moved it to the front of the file which causes the reset_user_passwords_silently.sh file to fail since the first item in the first batch file users_aa is an empty line after it's been split with generate_batch_users_files.sh ; If we're keeping the sort we might want to add a line to the create_users_file.sh to check for an empty line at the start and remove it.
2. I don't know how, but someone had created a user account with an email of just a series of numbers only. It caused the batch to fail at that point, so I edited the batch file manually, removed it, and resumed. Unsure if its something we want to address in the WordPress database or not, but thought it worth mentioning.