The master password should not be requested more times in a row
Categories
(Firefox :: about:logins, enhancement, P2)
Tracking
()
Tracking | Status | |
---|---|---|
firefox68 | --- | unaffected |
firefox69 | --- | unaffected |
firefox70 | --- | verified |
People
(Reporter: danibodea, Assigned: jaws)
References
Details
(Whiteboard: [passwords:management] [skyline])
Attachments
(1 file)
Note
- When the user attempts to edit a login, the master password is requested too many times in a row.
Affected versions
- Nightly v70.0a1
Affected platforms
- All
Steps to reproduce
- Open browser.
- Save any login.
- Set a master password.
(Restart browser.) - Open the "about:logins" page.
Observe: Master password is requested. Type it in. - Click the "edit" button to edit a login.
- Click the "eye-like" icon to reveal the login password.
Observe: Master password is requested. Type it in. - Change anything to the saved login (Website Address/Username/Password).
- Click the "Save Changes" button.
Observe: Master password is requested. Type it in.
Expected result
- The master password is not requested so often.
Actual result
- The Master Password is requested too often.
Comment 1•5 years ago
|
||
(In reply to Bodea Daniel [:danibodea] from comment #0)
- Click the "Save Changes" button.
Observe: Master password is requested. Type it in.
You're saying the MP is requested as soon as Save is clicked? If so, that is definitely not intentional.
Reporter | ||
Comment 2•5 years ago
|
||
Yes, that does happen. The problem is that we don't have specification on the appearance of the master password prompt. Are there any written specification on the behavior of the MP? We could use then for test case writing around the password manager because I don't think it behaves correctly or as previously expected. Thanks.
Assignee | ||
Updated•5 years ago
|
Updated•5 years ago
|
Assignee | ||
Comment 3•5 years ago
|
||
We should only prompt for master password when copying a password, or when changing from a hidden to revealed password.
This patch maintains the revealed state when going from readonly to edit mode of the login. When leaving edit mode, whether through cancel or save, the revealed state is reset.
Pushed by jwein@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/d01e6a3eea5c Don't prompt for master password when re-rendering the login-item. r=MattN
Comment 6•5 years ago
|
||
bugherder |
Reporter | ||
Comment 7•5 years ago
|
||
I can confirm that the master password is not requested anymore when saving changes on a login.
Steps to reproduce:
- Open browser.
- Save any login.
- Set a master password.
(Restart browser.) - Open the "about:logins" page.
Observe: Master password is requested. Type it in. - Click the "edit" button to edit a login.
- Click the "eye-like" icon to reveal the login password.
Observe: Master password is requested. Type it in. - Change anything to the saved login (Website Address/Username/Password).
- Click the "Save Changes" button.
Before fix: Observe: Master password is requested. Type it in.
After fix: Master password is not requested when saving changes of a login.
Validated in Nighty v70.0a1 (2019-08-29) (64-bit) on Windows 10 and Mac OS 10.13.6.
Comment 8•5 years ago
|
||
bugherder uplift |
Updated•5 years ago
|
Description
•