Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug: Browser extension have problems to fill out nextcloud pasword prompts #803

Closed
user858753257 opened this issue Mar 10, 2020 · 12 comments
Labels

Comments

@user858753257
Copy link

Nextcloud has the (security)feature that after a while when a user didn’t do any action on the webui and than e.g. after two hours he perform a task that require a password , Nextcloud displays a separate password prompt (see picture) .

The browser extension in Firefox and chrome can’t recognize this single password prompt and can’t fill it out .

The second bug is that the password fill out button (the red/green one) are duplicated here .

44668AF8-EBD0-429F-A5CE-D8536665D5FB

@droidmonkey droidmonkey transferred this issue from keepassxreboot/keepassxc Mar 10, 2020
@varjolintu varjolintu added the bug label Mar 10, 2020
@varjolintu
Copy link
Member

Wow. I'd like to see the page source code around the login form. I've seen icons behaving like that when there are some canvas elements. The observer that should hide them cannot access the canvas.

@user858753257
Copy link
Author

@# Here are some more screenshots and the code:

3F59FA42-C0BF-4F9D-AA4E-726AFC4C5BD0
5A2FC957-E0CC-4C27-86A9-9E507B3474AE

@varjolintu
Copy link
Member

What about the source code of those hoovering icons where database is closed?

@varjolintu
Copy link
Member

Any difference with the latest 1.6.5 release?

@user858753257
Copy link
Author

Hi @varjolintu until now . Nothing has changed

@varjolintu
Copy link
Member

And what about https://github.com/keepassxreboot/keepassxc-browser/releases/tag/1.7.0-beta1 ? I have my own NextCloud now so I can do some more testing. Is the only way to get that password prompt to just wait?

@madpilot78
Copy link

With 1.7.0 I'm seeing nextcloud has problems detecting the nextcloud TOTP field when using the "Two-Factor TOTP Provider" nextcloud plugin. The button to paste the TOTP does not appear anymore.

This used to work before 1.7.0.

Not sure if this is related.

@varjolintu
Copy link
Member

@madpilot78 Gotta test that one too.

@madpilot78
Copy link

@varjolintu I noticed that with version 1.7.1, while the icon for the TOTP is still not appearing in the nextcloud totp login field, I now can paste it via the context menu, which is more practical than manual cut&paste from the keepassxc window.

@varjolintu
Copy link
Member

@madpilot78 Not good enough :) I'll try to fix it for 1.7.2.

@varjolintu
Copy link
Member

@madpilot78 This is fixed with #1022.

@varjolintu
Copy link
Member

This is now tracked in #1358.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants