New issue
Advanced search Search tips

Issue 812172 link

Starred by 0 users

Issue metadata

Status: WontFix
Owner:
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 1
Type: Bug



Sign in to add a comment

Reauth asked too often for exporting passwords

Project Member Reported by vabr@chromium.org, Feb 14 2018

Issue description

Chrome Version       : 66.0.3343.0
OS Version: iOS
device: iPhone 5S

What steps will reproduce the problem?
1. Open Settings > Save Passwords > scroll down, tap Export Passwords..., then confirm export, authenticate, cancel
2. Immediately press Export Passwords... again and confirm exporting

What is the expected result?
Exporting proceeds without reauthentication, because there should be a 60s grace period during which the reauth is valid for another export.

What happens instead of that?
Chrome prompts for reauthentication again.


Assigning to ioanap@ for now, because I'm not sure I will get to investigating this until Tuesday.

 

Comment 1 by vabr@chromium.org, Feb 14 2018

Interestingly, the reauth from export does allow the user to view the single password entries within the 60 seconds, just not another export.

Comment 2 by vabr@chromium.org, Feb 14 2018

Status: WontFix (was: Assigned)
Ah, so this is probably WAI and a misunderstanding on my side.
The original requirement for reauth is https://crbug.com/791009#c8, which does say: "...we would prefer to use the safer approach of always requiring reauth for export."

Also desktop behaves in this way. Only Android has currently a grace period for export (disjoint from the one for single viewing), so I'll adjust that instead.

Sorry for the noise.
Cc: -vabr@chromium.org

Sign in to add a comment