YouSendIt password does not get cleared from password manager if it's no longer valid

RESOLVED FIXED in Thunderbird 15.0

Status

Thunderbird
Preferences
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: mconley, Assigned: mconley)

Tracking

unspecified
Thunderbird 15.0
x86
All

Thunderbird Tracking Flags

(thunderbird13 fixed, thunderbird14 fixed)

Details

Attachments

(1 attachment, 1 obsolete attachment)

(Assignee)

Description

5 years ago
STR:

1)  Create a new YouSendIt Filelink account. When the password prompt comes up, give it something incorrect, but tell it to save the password.
2)  When the authorization error is displayed, click "Set up Account" again

What happens?

The dialog attempts to reauthorize using the saved password, which doesn't give the user a chance to correct it.

What's expected?

If authorization fails, the user's saved password should get wiped out so that we reprompt.
(Assignee)

Comment 1

5 years ago
Created attachment 622740 [details] [diff] [review]
Patch v1

Here's my first crack at it.
Assignee: nobody → mconley
Attachment #622740 - Flags: review?(dbienvenu)
(Assignee)

Updated

5 years ago
status-thunderbird13: --- → affected
tracking-thunderbird13: --- → ?

Comment 2

5 years ago
Created attachment 623781 [details] [diff] [review]
handle changed password

Sorry for the delay. I tried to test this by changing my password on the YSI site, and ran into a couple problems. I've attached a patch that detects the error code in that case (400). With that change, we eventually figure out that the password is bad and reprompt the user. It's not seamless, in the sense that the first upload fails, and the second upload causes us to reprompt for the password. But it's a hella-better than what we have now. r+ with that change.

For extra credit, we could pre-fill in the password prompt with the previous password, and do the retry/cancel/enter new password thing. I'm a little worried that we really don't know why the password failed, and if it's just a temporary outage on the YSI server, permanently forgetting the password might mess up the user. They can always reset it on the YSI web-site, of course, and perhaps this won't be a big problem. It doesn't seem to have been an issue so far.
Attachment #622740 - Attachment is obsolete: true
Attachment #622740 - Flags: review?(dbienvenu)
Attachment #623781 - Flags: review+
(Assignee)

Updated

5 years ago
Attachment #623781 - Flags: approval-comm-beta?
Attachment #623781 - Flags: approval-comm-aurora?

Updated

5 years ago
Attachment #623781 - Flags: approval-comm-beta?
Attachment #623781 - Flags: approval-comm-beta+
Attachment #623781 - Flags: approval-comm-aurora?
Attachment #623781 - Flags: approval-comm-aurora+
(Assignee)

Comment 3

5 years ago
Thanks for the assist, David!

comm-central: https://hg.mozilla.org/comm-central/rev/b4c56e6d36b2
comm-aurora: https://hg.mozilla.org/releases/comm-aurora/rev/2516d54a6212
comm-beta: https://hg.mozilla.org/releases/comm-beta/rev/f1ce538da8af
Status: NEW → RESOLVED
Last Resolved: 5 years ago
status-thunderbird13: affected → fixed
status-thunderbird14: --- → fixed
tracking-thunderbird13: ? → ---
Resolution: --- → FIXED
Target Milestone: --- → Thunderbird 15.0
You need to log in before you can comment on or make changes to this bug.