http auth password prompt is not shown on default page
Categories
(Toolkit :: Password Manager, defect, P3)
Tracking
()
People
(Reporter: virgo, Assigned: dimi)
References
Details
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0
Steps to reproduce:
I have password manager set up with master password.
I have have Firefox sync set up (can also cause master password prompt).
I have page open in Firefox, that is protected with http auth password, that is saved in password manager.
I close Firefox and later reopen it (tabs are restored), with that protected page being active.
Actual results:
Firefox asks for Master password and then nothing happens and page keeps loading forever. Even manual reload attempt does not result in http auth password prompt. I need to open new tab and navigate to that page on that tab. Then http auth password prompt is shown with values from password manager and after submitting it page is loaded. After that initial page can also be loaded via reload.
Problem does not occur, if protected page is not active page after opening browser (I had some other tab active before closing browser).
Expected results:
After asking master password Firefox should ask for http auth password and allow submitting it (with values from password manager). And then page should load.
Comment 1•3 years ago
|
||
The Bugbug bot thinks this bug should belong to the 'Toolkit::Password Manager' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.
Comment 2•3 years ago
|
||
Thanks for the report! The steps seem reproducible and so we'll look into it and figure out what's going on.
:serg, do you mind looking into this?
Updated•3 years ago
|
Reporter | ||
Comment 3•3 years ago
|
||
Seems to now work in 100.0.2 but there is nothing in the release notes.
Reporter | ||
Comment 4•3 years ago
|
||
Strange, it worked for two days but today I had same problem... So my post about it working in 100.0.2 is invalid.
Assignee | ||
Comment 5•3 years ago
•
|
||
Hi Virgo,
sorry for the late reply. I can't reproduce this issue on my platform.
Could you help check if you can reproduce this issue by replacing the http auth site you are using to this test website (Username: user; Password: password). And also, could you share with me the URL of the website you encounter this issue? Thanks!
Reporter | ||
Comment 6•3 years ago
|
||
Does not happen on that test page (tried leaving on that page, when closing browser for night). Original page is private ttrss (TinyTinyRSS) instance, so I cannot just share url.
But that test page is cached and shows up even before asking password (but refresh immedately asks password). Could it be, that error occurs only, when cache is expired for page, so that it needs to reload?
I have not been able to duplicate error by just closing browser and reopening it. But every time it happens, is when browser has been closed for overnight.
Comment 7•3 years ago
|
||
The severity field is not set for this bug.
:serg, could you have a look please?
For more information, please visit auto_nag documentation.
Assignee | ||
Comment 8•2 years ago
|
||
Hi Virgo, thank you for testing!
(In reply to Virgo Pärna from comment #6)
But that test page is cached and shows up even before asking password (but refresh immedately asks password). Could it be, that error occurs only, when cache is expired for page, so that it needs to reload?
Yes, if the cache is not expired, the http authentication popup won't appear.
I have not been able to duplicate error by just closing browser and reopening it. But every time it happens, is when browser has been closed for overnight.
Could you help test closing browser, clear cache and then reopening (without overnight) on both the test website and the private site?
You can clear the cache from History
-> Clear Recently History
-> select Cache
checkbox
And sorry to ask one more thing to test. Could you help disable Primary Password and test this issue again? I want to know whether primary password is needed to reproduce this issue. Thanks!
Reporter | ||
Comment 9•2 years ago
|
||
I did not want to mess up history on my Firefox, so I tried to to test it under new profile. On test url cleaning history with saved password and with master password set works.
I tried my ttrss url under test profile (opened instance, saved password, cleared history) and was also unable to duplicate.
But in my main profile it appears, that it is Firefox Sync, that causes master password prompt at startup.... Maybe it is connected with this.
About testing on main profile with master password disabled - are there any possible side-effects, when removing master password on existing installation?
Assignee | ||
Comment 10•2 years ago
|
||
(In reply to Virgo Pärna from comment #9)
About testing on main profile with master password disabled - are there any possible side-effects, when removing master password on existing installation?
Hi Virgo, sorry for the late reply.
It shouldn't have any side-effects removing master password on existing installation and re-enable it after testing (except the fact that saved password is not protected by primary password during testing).
But let's play safe and just test this on a new profile.
Could you use the new profile with
- primary password set
- testing with your ttrss url
- browser has been closed for overnight
If this reproduces the issue, then we remove primary password in the new profile and test again.
Thanks for your help!
Reporter | ||
Comment 11•2 years ago
|
||
With master password not set page shows password dialog and loads just fine. That in my main profile. I will try adding Firefox Sync to test profile, but I cannot try it before next week.
Assignee | ||
Updated•2 years ago
|
Reporter | ||
Comment 12•2 years ago
|
||
Cannot duplicate on clean profile with Firefox sync set up.
But on my main profile I also have lot of open tabs that are restored... If that somehow affects startup, if there is some kind of race condition. I have another, much much slower computer, where the problem occurred initially also, but there it stopped happening.
Comment hidden (off-topic) |
Comment 14•2 years ago
|
||
Sorry, there was a problem with the detection of inactive users. I'm reverting the change.
Assignee | ||
Comment 15•2 years ago
|
||
virgo responded in Comment 12, clear the needinfo
Assignee | ||
Updated•2 years ago
|
Reporter | ||
Comment 17•2 years ago
|
||
Works on version 105
Description
•