1640925 - [Windows] Blank username and password is the default option of the OS auth when having an OS account linked to Microsoft Account

Status: RESOLVED WORKSFORME

(Firefox :: about:logins, defect, P5)

Description

[Cosmin Muntean [:cmuntean], Ecosystem QA]

Attachment: OS auth dialog when having an OS account linkt to a Microsoft Account.png

[Affected versions]:

• Nightly 78.0a1;
• Beta 77.0b9;
• Release 76.0.1

[Affected Platforms]:

• Windows 10 Home version 1809 OS build 17763.379
• Windows 10 Pro version 1903 build 18362.836

[Prerequisites]:

• Have the OS account linked to Microsoft Account
• Have at least one login saved.
• Have the OS auth feature enabled.
• No PIN code is set.

[Steps to reproduce]:

1. Open the latest Firefox 76.0.1 release.
2. Navigate to "about:logins" page an select any of the saved logins
3. Click the "Show password" button.
4. Observe the OS auth dialog.

[Expected result]:

• The account linked to Microsoft Account (email) is the default option.

[Actual result]:

• A blank username and password is the default option of the OS auth. However, if the email account and its password are entered, the credentials are accepted and the password is shown.

[Notes]:

• The account linked to Microsoft Account is listed in the "More choices" and can be successfully selected.
• This behavior can be confusing to the users since the OS auth requires a "User name" and a "Password" and probably they will not think to enter the Microsoft email account.
• Unfortunately I didn't have time to test this behavior on other Windows versions.
• Attached a screenshot of the issue.

Comment 1

[Cosmin Muntean [:cmuntean], Ecosystem QA]

I did more investigation on 3 different Windows 10 versions, here are the results:

1. Windows 10 Home version 1809 OS build 17763.379

• Screenshot with OS dialog when you have only the account linked to a Microsoft account: Screenshot
• Screenshot with OS dialog when you have the account linked to a Microsoft account + a PIN code set: Screenshot

2. Windows 10 PRO version 1903 OS build 18362.836

• Screenshot with OS dialog when you have only the account linked to a Microsoft account: Screenshot
• Screenshot with OS dialog when you have the account linked to a Microsoft account + a PIN code set: Screenshot

3. Windows 10 Pro version 2004 OS build 19041.264 - On this version, the account linked to the Microsoft account is not displayed in the OS auth dialog

• Screenshot with OS dialog when you have only the account linked to a Microsoft account: Screenshot
  Note: Every time when I log into the account linked to the email, the Microsoft account window that asks me to create a PIN.
• Screenshot with OS dialog when you have the account linked to a Microsoft account + a PIN code set: Screenshot

I have tested with Firefox 76.0.1 release and the latest Nightly 78.0a1 build and I have encountered the same behaviors on both Firefox versions.

Comment 2

[Pascal Chevrel:pascalc (PTO until Sept 2)]

Sam, does it fall in your bucket? Is that still an issue? Thanks

Comment 3

[Sam Foster [:sfoster] (he/him)]

I'm not aware of anything that has changed that would fix or change this, so as far as I know this remains an issue. The OS auth feature is held to nightly, but it has a P2 prioritization, so I know its on that team's radar. I believe some OS Auth work is on the platform/OS integration team's roadmap, but I don't have a bug number. If that is still planned we'll make a meta bug for the password manager / about:logins tasks that are OS (re)auth related that might get unblocked and link it to yours as appropriate. :keeler, can you confirm?

Comment 4

[Dana Keeler (she/her) [:keeler]]

I don't know what the OS integration team has planned. Unfortunately, I don't know who to ask, either.

Comment 5

[ragimeg698]

The key to copy links is broken. It was broken in 88 and remains unfixed.

Copying links is a core function of a web browser. It is completely unreasonable that this function should be removed. Tens, maybe hundreds of millions of people use hotkeys. It is an absolutely normal, absolutely acceptable way to interface with a computer. All of those people have had to find solutions outside of Firefox, and for absolutely no reason.

A "replacement" key that is not physically usable is obviously not a replacement.

Since my legitimate reports about this critical bug are being removed, I'm leaving comments on other people's bugs.

Comment 6

[Yasmin S]

Serg. We weren't able to reproduce this on our end in our triage. Is this still reproducible ? Should we consider decreasing severity here given this has been open for a while ?

Comment 7

[Sergey Galich [:serg]]

This feels very much like Windows Hello issue and not Firefox issue. Perhaps it has been fixed already. I had encountered a bunch of bugs with Windows Hello a few years ago and they were fixed by Microsoft.

Given that user can still select their OS account this is not nearly S2. And given that we do not hear more about this problem suggests that it has been fixed. I'm going to close this bug, but if someone can reproduce they are welcome to reopen or file a new one.