413249 - No way to store HTTP Authentication password for sub-loads (e.g. XMLHttpRequest)

Status: RESOLVED FIXED

(Toolkit :: Password Manager, defect)

Description

[Alf Eaton]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b2) Gecko/2007121016 Firefox/3.0b2
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b2) Gecko/2007121016 Firefox/3.0b2

When accessing a URL that's protected by HTTP Authentication, Firefox 2 displays an option on the username/password dialog to "Use Password Manager to remember this password".

This option is not present in Firefox 3.0b2, which means you have to re-enter your password every time the URL is accessed.

Reproducible: Always

Steps to Reproduce:
1. Visit https://api.del.icio.us/v1/tags/get (or any other site that uses HTTP Authentication).
2. Note the lack of .
Actual Results:  
No "Use Password Manager to remember this password" option on the authentication dialog.

Expected Results:  
The option to remember the username and password using the Password Manager.

Comment 1

[Alf Eaton]

I should add that in that specific case - when you're visiting the site in the browser - it's not a problem because the "remember this password" bar appears once the page is actually loaded. The problem is when the URL is accessed by XMLHttpRequest - you fill in the correct username and password but there's no window to attach the "remember this password" bar to.

Comment 2

[Jesse Ruderman]

Dolske, how hard would it be to show the "Remember this password" checkbox in the dialog for subloads (XMLHttpRequest, <img src>, etc) but not for top-level loads where we'll be able to use the infobar UI?

Comment 5

[Mike Beltzner [:beltzner, not reading bugmail]]

This does not block the final release of Firefox 3.

Comment 6

[:Gavin Sharp [email: [e-mail]]]

XMLHTTPRequest password prompting is currently broken due to bug 422135, but with the patch to bug 422808 applied (which works around bug 422135), password prompting and saving works fine. Even uses the notification bar!

Comment 7

[richard]

sorry for the n00b question: is this related to del.ico.us direc.tor being broken in b4?  the js console throws the following in MacOS and WinXP:

Warning: Error in parsing value for property 'filter'.  Declaration dropped.
Source File: http://johnvey.com/features/deliciousdirector/d.css
Line: 48

Security Error: Content at http://johnvey.com/features/deliciousdirector/d2.js may not load data from https://api.del.icio.us/.

Error: this.allPosts is null
Source File: http://johnvey.com/features/deliciousdirector/d2.js
Line: 332

none of this happened in b3, which still works fine.  if this is unrelated, i would greatly appreciate being shown where i should go report this, as i can't use FF3 until this is fixed.   cheers.

Comment 8

[richard]

Ironically, loading 

https://api.del.icio.us/v1/tags/get 

and authenticating, then going back to direc.tor seems to work in b4...

Comment 9

[:Gavin Sharp [email: [e-mail]]]

skwirl: can you file a new bug about that, and CC me? Finding a narrower regression range using builds from ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/ would also be useful.

The original bug about not being prompted to save credentials for subloads seems to be working for me, so I'll mark this FIXED by bug 422135.

Comment 10

[richard]

Filed bug 424655 and added you to the Cc: list.  Thank you for your assistance.