Closed Bug 639188 Opened 13 years ago Closed 7 years ago

Users prompted multiple times for master password when opening multiple tabs

Categories

(Toolkit :: Password Manager, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 177175

People

(Reporter: jj10, Unassigned)

References

Details

(Whiteboard: [passwords:master-password])

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15 (.NET CLR 3.5.30729)

If you open a group of bookmarks, and they all have saved credentials locked by the Firefox master password, you are prompted to enter the master password for each site.  This can get very tedious when opening a large amount of bookmarks, for instance, a folder of daily websites to visit. 

This is a request to only ask for the master password once and have Firefox recognize that the rest of the bookmarks being opened already have authenticated access to stored credentials.

Reproducible: Always

Steps to Reproduce:
1.  Bookmark a number of sites into a folder and save login credentials for them.
2.  Open all the bookmarks in tabs.

Actual Results:  
You are prompted to enter the master password for every tab that needs access to saved credentials.

Expected Results:  
Enter the password once for the first tab and all subsequent tabs are then given access.
Version: unspecified → 3.6 Branch
Component: Account Manager → Password Manager
Product: Firefox → Toolkit
QA Contact: account.manager → password.manager
Version: 3.6 Branch → unspecified
It's not just opening bookmark groups --- It will also do this problem if you have several pinned "app tabs".

Here is a screenshot:
http://i.imgur.com/uxrUO.png

Please change the status of this bug to CONFIRMED because this is a real issue and its easy to verify.  Just do the following (for example):

(1) Log into Gmail, Facebook, and Twitter.
(2) Remember all those login infos using the master password feature.
(3) Close browser. Open browser...
(4) It will prompt u with a master password inputbox.

HERE IS THE BUG -----> If you don't type in ur password quick enough, you will get ANOTHER same master pass inputbox.  So u have to enter it in TWICE or more times.
I can confirm this happens on OS X as well.
Status: UNCONFIRMED → NEW
Ever confirmed: true
OS: Windows 7 → All
Hardware: x86 → All
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0
20150604030205

Can anyone still reproduce this in the current version of Firefox?

I can't reproduce this. I middle-clicked a folder with 3 bookmarks that have saved login information. There was only one master password prompt. E10s status made no difference.
(In reply to Gingerbread Man from comment #3)
> Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0
> 20150604030205
> 
> Can anyone still reproduce this in the current version of Firefox?
> 
> I can't reproduce this. I middle-clicked a folder with 3 bookmarks that have
> saved login information. There was only one master password prompt. E10s
> status made no difference.

From the dupe, seems like this happens on startup with session restore in some cases as well.
See Also: → 720672
Whiteboard: [passwords:master-password]
I believe *sync* is also causing this. Maybe I should report as a new bug, but the reason for two password pronpts is exactly the same regardless of the cause -- there is no interlock mechanism to prevent concurrent prompts.

I'm guessing that if sync is enabled, then it must prompt for a password soon after startup in order to authorise exchange of sync information. Problem is that the master password request for sync is triggered very late during the firefox startup -- by which time, the user has probably begun typing in the address bar and may have launched a page which itself is requesting the master password.

I can reproduce this 90% of the time in devfox, if I type a short URL in the address bar as soon as the address bar becomes ready. 

As suggested earlier, it ought to be posssible to interlock the password requests so that a second request does not trigger a second prompt. It would also help greatly if the password prompt did not steal keystrokes intended for the address bar.
Duplicate of Bug 177175, one of the oldest bugs which still is not resolved. Come on, guys, are you serious??

Also a duplicate of Bug 794736, 95397, 981579, 1176399, 1232151. Did I forget one or more?
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.