368510 - Password manager will forget passwords in special cases

Status: RESOLVED DUPLICATE of bug 379997

(Toolkit :: Password Manager, defect)

Description

[any one]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1

The password manager will forget passwords (and prompt too often) in the following case:

I have a site which requires .htpasswd-Authentication in my Bookmarks. This site also has an RSS-Feed, which I also have bookmarked with "http://user@[e-mail]".
As soon as I will open the bookmarks, Firefox will ask for my master password, whether I wish to go onto that site or not. At the same time, the RSS will fail to load until manually refreshed (which will work fine).
When NOT refreshing the RSS-Feed manually and entering the pwd-protected Site via bookmark, FF will a) ask for the Master password and continue regularly if not given the master password in first instance or b) will ask login/password of that site again and wishes to save the password in the FF master pwd file and also wnats to have the master pwd for that.

I hope this one is reproducable and (not at least) understandable. I have been browsing the already reported bugs but as English is not my native language I hope its clear what I want to express ;)

Reproducible: Always

Steps to Reproduce:
1. Go to .htpasswd/.htaccess-Protected site
2. Have a RSS-Feed with provided login/pass in ur bookmarks
3. Lookup bookmarks first
4. You will be asked for master passwd
5. If you give master pwd and visit the site later on, you will be asked for complete login/pwd deatils, pwd manager will not remember it

PS: Not quite sure if it happens every time. For details I may be contacted at my email adress, I'll be glad to help

Comment 1

[Justin Dolske [:Dolske]]

This sounds very much like a duplicate of 379997... When HTTP authentication fails, the code assumed the stored login must have been invalid and deleted the login. This behavior was simply removed, because authentication could fail for many different reasons.