Description:
Reauthenticate if user clicks "Show Password" in CrOS Password Manager. Today, if the user clicks this button (Settings > Advanced > Manage Passwords > Show), the password appears upon clicking "Show" without any additional authentication
Motivation:
The customer would like to make the "Show Password" button available to end-users for convenience, but would like to have the user reauthenticate into their Google account before the password shows. Their rationale was that this is similar to how Chrome Admin Console works - after 5 minutes of idle time, the session asks the user to reauthenticate just to ensure that they are still the authorized user.
Existing workarounds:
The customer understands that the Show Password button can be disabled in CMC. However, they would like to offer the option to end-users as long as they can force the user to reauthenticate into Google upon clicking the Show button first.
Comment 1 by sheriffbot@chromium.org
, Aug 6 2016