Empty dropdown under "Account Information" button for Shib users

[pdurbin]

What steps does it take to reproduce the issue?

• Log into https://demo.dataverse.org with Institutional Login (Shibboleth)
• Go to Account page.
• Click "Account Information" button
• Observe empty dropdown (screenshot below)

To whom does it occur (all users, curators, superusers)?

All users.

What did you expect to happen?

I'm pretty sure that previously the "Account Information" button shouldn't appear at all?

Which version of Dataverse are you using?

Dataverse 5.8 but I'm seeing the same on Dataverse 5.6.

Screenshots:

Thanks to @PaulBoon for noticing this!

[PaulBoon]

Thanks for creating this issue @pdurbin. This problem was discovered by Tim Warbout, a user of DataverseNL, so all credits for finding it go to him.

[donsizemore]

@pdurbin Just a note that I've reproduced this on 5.3:

The Payara log is quiet as I'd expect; Firefox's browser console not so much:

Attempt to override an existing term: "brand-shorter-name". branding/brand.ftl
Attempt to override an existing term: "brand-short-name". branding/brand.ftl
Attempt to override an existing term: "brand-full-name". branding/brand.ftl
Attempt to override an existing term: "brand-product-name". branding/brand.ftl
Attempt to override an existing term: "vendor-short-name". branding/brand.ftl
Attempt to override an existing message: "trademarkInfo". branding/brand.ftl
[Exception... "Favicon at "https://sso.unc.edu/favicon.ico" failed to load: Forbidden."  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource:///modules/FaviconLoader.jsm :: onStopRequest :: line 253"  data: no] FaviconLoader.jsm:253:22
Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified
Content Security Policy: Ignoring “'unsafe-inline'” within script-src: ‘strict-dynamic’ specified
Content Security Policy: Ignoring “https:” within script-src: ‘strict-dynamic’ specified
Content Security Policy: Ignoring “http:” within script-src: ‘strict-dynamic’ specified

[pdurbin]

Before making any changes, as of 5.10.1, here what a builtin user and a shib user see:

Builtin user (dropdown to edit account or password)

Shib user (weird broken dropdown)

[pdurbin]

In this pull request, I removed the weird empty "Account Information" popup:

• improve email verification, no popup, auto-verify Shib users #8579