784108 - share credentials with apps

Status: RESOLVED WONTFIX

(Firefox for Android Graveyard :: Web Apps (PWAs), enhancement, P2)

Description

[Wesley Johnston (:wesj)]

I hate installing an App, launching it, and then having to log in. If we have the usernames/passwords for these domains, it would be nice to have this just work. Can we copy over signons.sqlite at least to save the user some pain?

Comment 1

[Jason Smith [:jsmith]]

(In reply to Wesley Johnston (:wesj) from comment #0)
> I hate installing an App, launching it, and then having to log in. If we
> have the usernames/passwords for these domains, it would be nice to have
> this just work. Can we copy over signons.sqlite at least to save the user
> some pain?

Are there any security/privacy risks with doing this?

Comment 2

[Anant Narayanan [:anant]]

The initial copy is insufficient because we will then have to keep data in sync later on as well. A better/cleaner solution would be to implement a background process that is in charge of brokering login data from a single database, to which both Firefox and each App can be a consumer.

Comment 3

[Myk Melez [:myk] [@mykmelez]]

If the data is in an SQLite database, then we don't need a background process, as SQLite databases can be concurrently accessed by multiple processes:

http://www.sqlite.org/faq.html#q5

Thus we just need to give the app process a reference to the Firefox profile that created it and then make the app's password manager open the SQLite database in the Firefox profile rather than the app's profile in order to share this information between Firefox and all apps.

Comment 4

[Wesley Johnston (:wesj)]

I think we may be able to do that with very few changes if we can use initWithFile() in nsILoginManagerStorage: 

http://mxr.mozilla.org/mozilla-central/source/toolkit/components/passwordmgr/storage-mozStorage.js#168

Comment 6

[Myk Melez [:myk] [@mykmelez]]

Per bug 1235869, we're going to disable the Android web runtime, so we won't fix this bug in it.

(This is part of a bulk resolution of bugs in the Firefox for Android::Web Apps component, from which I attempted to exclude bugs that are not specific to the runtime, but it's possible that I included one accidentally.  If so, I'm sorry, and please reopen the bug!)