434487 - Session Restore with multiple prompts has broken keyboard UI

Status: NEW

(Firefox :: Session Restore, defect)

Description

[Onno Ekker [:nONoNonO UTC+1]]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14

When you restore a crashed firefox with more than one tabs with basic authentication, you can only authenticate to the first (modal) password prompt popup with keyboard only.

After that, you see the next login popup window, but is has no focus and can not get focus with your keyboard. You need to grab your mouse and give thew window focus.

This bug is probably caused by the login window being modal and is at the moment a big problem because of bug 348997 and enhancement bug 92966 .

Reproducible: Always

Steps to Reproduce:
1. Logon on on two tabs to two websites with different credentials and without a master password.
2. Kill Firefox
3. Start Firefox and you get two password prompts
4. Try to login to both of them without using your mouse...
Actual Results:  
You can login to the first popup but the second popup doesn't get focus.

Expected Results:  
After logging in to the first popup the second popup should get focus.

Or alternatively, you could wait for the popup to display until the tab it's for gets active. This would also fix bug 348997 .

Filed this is Normal: There is a workaround (use your mouse), but it's not an easy workaround. I also thought I already filed it some years ago, but cannot find it as a bug anymore. I did comment it on some of the (master) password (proxy) bugs that are related, but have come to the conclusion that this is a valid different bug.

Comment 1

[Simon Bünzli]

These aren't Session Restore's prompts. -> Core:Security UI

(although this bug's probably just a DUPE of bug 348997 as there just shouldn't be more than one password prompt)

Comment 2

[Onno Ekker [:nONoNonO UTC+1]]

Maybe it's core:security ui, but Session Restore is where it shows up.

Maybe it's a dupe of bug 348997, but not with the current Sumary is wrong.
The summary of bug 348997 suggests it's about the same password, that you would get prompted normally when opening the two tabs after each other only once and with session restore twice.

This bug is for cases where two prompts are wanted, because the uses is logged in on two sites with different credentials. When going to these sites in two different tabs and without a master password, the user also gets prompted twice. The only way for Firefox to log you in (again), is to prompt you for the credentials...

Comment 3

[Onno Ekker [:nONoNonO UTC+1]]

I don't understand why Session Restore has a problem with this, but when I set my homepage to 2 tabs with basic authentication and restart Firefox all is handled normally. Also 2 accounts in Thunderbird is no problem? Do they handle this differently? Is it both secure? What's so special about Session Restore?

Comment 4

[Kai Engert (:KaiE:)]

reassign bug owner.
mass-update-kaie-20120918

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Is this still an issue?

Comment 6

[Onno Ekker [:nONoNonO UTC+1]]

It is a bit hard to reproduce a crash (fortunately). After a normal close and start I as able to access the three password popups without a problem, but after restarting via pressing Shift-F2 and entering the restart command in the developer toolbar I wasn't even able to access the first password popup.

Comment 7

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Do you have any add-ons that may be interfering? I couldn't reproduce an inability to interact with the password prompt using the graphical command-line interface.

Comment 8

[Onno Ekker [:nONoNonO UTC+1]]

I even get this is safe-mode. Also, sometimes the second or third pop-up doesn't even respond to the OK or Cancel buttons (neither with keyboard nor mouse) and can only be dismissed by pressing the [X] Close icon on the top right of the window…

Comment 9

[Dana Keeler (she/her) (use needinfo) [:keeler]]

This isn't in the right component, but I'm not sure where to put it.

Comment 10

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.