Toolkit:Password Manager

From MozillaWiki
Jump to: navigation, search
Password manager key icon

The Toolkit password manager is responsible for remembering usernames and passwords (aka. logins) on sites and allowing the user to autofill or autocomplete it upon returning to the website.

Priority Bugs

(Not including about:logins bugs)

P1

Full Query
ID Summary Priority Keywords Whiteboard Assigned to
1200472 Broaden search criteria for password fill suggestions shown in the context menu affordance "Fill Password" to include subdomains. P1 [passwords:cross-origin] [passwords:fill-ui] Matthew N. [:MattN] (PM me if requests are blocking you)
1596660 Create a GeckoView nsILoginManagerStorage backend P1 [passwords:storage] Matthew N. [:MattN] (PM me if requests are blocking you)
1596663 Switch to async login search APIs to support GeckoView storage queries P1 [passwords:storage] Matthew N. [:MattN] (PM me if requests are blocking you)
1337606 Intermittent toolkit/components/passwordmgr/test/browser/browser_DOMInputPasswordAdded.js | Test timed out - P1 intermittent-failure, leave-open [stockwell disabled]
1554959 Intermittent toolkit/components/passwordmgr/test/mochitest/test_autocomplete_https_upgrade.html | Test timed out. P1 intermittent-failure, leave-open, regression [stockwell disabled][stockwell needswork:owner]
1576490 Also fill the password confirmation field following the active field when filling a generated password P1
1566536 Support password generation in private windows P1 [passwords:generation]
1536728 Show a dismissed login capture doorhanger when a user edits a password field (before submission) P1 parity-chrome, uiwanted

8 Total; 8 Open (100%); 0 Resolved (0%); 0 Verified (0%);


P2

Full Query
ID Summary Priority Keywords Whiteboard Assigned to
551948 "Select which login to update:" UI appears when doing a password change with multiple diff. saved logins and no editable username field P2 [passwords:heuristics]
558178 Only show password capture dialog if we're reasonably sure the password was correct and the login was successful P2 [passwords:capture-UI] [blocked]
973759 Master password should be protected with stronger cryptography P2 sec-want [passwords:master-password]
1119067 Use a field with the "username" autocomplete field name to short-circuit username field detection P2 [passwords:heuristics]
1119083 Breakdown: Support capturing and filling of login credentials on hulu.com P2 [platform-rel-Hulu]
1122762 Collect domains where we get a strong signal that the password manager is failing the user P2 [passwords:telemetry]
1167872 Error: TypeError: this._recipeManager is null Source file: resource://gre/modules/LoginManagerParent.jsm Line: 118/185 P2 regression [passwords:recipes]
1194353 Context menu in autocomplete=username field without password field present should show "Fill Username" menu. P2 [passwords:fill-ui]
1223185 Discuss a replacement for master password P2 [passwords:master-password]
1407146 Migrate login manager storage to Punycode and only use Unicode for UI-facing parts P2 [passwords:tech-debt]
1425879 Intermittent toolkit/components/passwordmgr/test/browser/browser_autocomplete_insecure_warning.js | Uncaught exception - Wait for warning to show - timed out after 50 tries. P2 intermittent-failure, leave-open [stockwell disabled]
1427543 Consider making signon.autofillForms = false to be the default P2 parity-safari
1449867 proxy authentication username and password even if do not prompt selected P2
1513003 PasswordManager:findLogins MessageManager Topic allows querying for any origin's login P2 security:passwords
1523922 LoginManagerContent.jsm shows up in the page load profiles, consider rewriting in C++? P2 [qf:p2:pageload][fxperf:p3]
1524490 Add affordance for a user to manually save login credentials from the context menu P2 feature [passwords:capture-UI]
1531164 autocomplete=username field should get username autocompletions when there is no password field P2 [passwords:fill-ui]
1532377 Avoid saving a munged password in login storage P2 [passwords:capture-UI]
1536269 Handle masked pre-filled username values when attempting to autofill login forms P2
1548854 Dedupe autocomplete rows offering a generated password and the auto-saved login row P2
1555209 Use data from the autocomplete result in the parent to fill the correct password in content P2 [passwords:tech-debt] [passwords:fill-ui]
1561647 "View Saved Logins" at the end of the scroll-list when more than 5 logins saved P2
1569253 Remove old password manager UI (passwordManager.xul) from mozilla-central P2 [passwords:management]
1569848 Show indicators on saved logins that are re-using those breached passwords P2
1574907 Saved entry does not display password at field level when it's being set from multiple entries P2 regression, regressionwindow-wanted
1582116 test_prompt_async.html fails with fission enabled P2
1582117 test_prompt_http.html fails with fission enabled P2
1582499 Deal with InsecurePasswordUtils.isFormSecure() for fission P2
1584185 Password auto-filled with the wrong password (generated password) P2 [passwords:generation] [skyline]
1588091 test_autocomplete_https_downgrade.html fails with fission enabled P2
1592920 test_autofill_from_bfcache.html fails with fission enabled P2
1595244 Use login field labels/id/name to determine new-password field types P2 [passwords:heuristics] [passwords:generation]
1388674 Only prompt to save logins if a login field was modified by the user P2 [passwords:heuristics] Sam Foster [:sfoster] (he/him)
1583150 Update doorhanger might be displayed 2 times due to site fast reload/redirect and instant auto-fill P2 Sam Foster [:sfoster] (he/him)

34 Total; 34 Open (100%); 0 Resolved (0%); 0 Verified (0%);


Site Compatibility

Full Query
ID Summary Priority Keywords Whiteboard Assigned to
1289947 Logins not saved on www.icloud.com P2
1546749 Dojo Dijit's ValidationTextBox's dijitValidationIcon causes "X " to be saved as the username on login forms P2 [passwords:heuristics]
1562028 Firefox won't remember a password update on https://appleid.apple.com P2
1575361 Not offering to save passwords on virustotal.com (with Shadow DOM) P2

4 Total; 4 Open (100%); 0 Resolved (0%); 0 Verified (0%);


Architecture

Rough intro document

PasswordManagerRelationships.svg

PasswordManagerAutocomplete.svg

See Also

Firefox:Password_Manager:UI