1119554 - [meta] Revisit how the password manager captures login credentials during signup/registration flows

Status: NEW

(Toolkit :: Password Manager, task)

Description

[Chris Karlof [:ckarlof]]

It might be worthwhile revisiting how the password manager identifies a "signup" form. Signup forms present additional challenges vs login forms:

* Signup forms often have multiple non-password inputs, so we may capture the wrong value as the username.
* Signup forms sometimes use multiple password fields (to confirm the password), but not always.
* If the user already has saved credentials for the site, ideally we don't want to autofill those when the user is trying to sign up for a second account.
* Since password reset and change flows also use multiple password fields, it's possible our logic will get confused between these and signup flows.

Comment 1

[Herman]

Attachment: Here is a sample of 2 text fileds for UserID

URL is https://www.colfinancial.com/ape/Final2/home/HOME_NL_MAIN.asp?p=1

Comment 4

[Sergey Galich [:serg]]

Note: we use SignUpFormRuleset.sys.mjs for this purpose now.