RESOLVED INVALID 16027
Safari can't interact with Mac OS keychain for 'Site login' at Plone 3 portals with OpenID Authentication Support 1.0-b1 installed
https://bugs.webkit.org/show_bug.cgi?id=16027
Summary Safari can't interact with Mac OS keychain for 'Site login' at Plone 3 portal...
Graham Perrin
Reported 2007-11-17 03:54:50 PST
WebKit nightly and Safari fail to interact with Mac OS keychain for 'Site login' at Plone 3 portals with OpenID Authentication Support 1.0-b1 installed See http://dev.plone.org/plone/ticket/7373 This may be perceived as an issue with WebKit nightly. If you'd like access to a server on which the issue is reproducible, just ask.
Attachments
Standalone page demonstrating the issue (119.17 KB, text/html)
2007-11-18 03:19 PST, Mark Rowe (bdash)
no flags
Mark Rowe (bdash)
Comment 1 2007-11-17 08:53:09 PST
What version of Safari are you using?
Graham Perrin
Comment 2 2007-11-17 15:38:54 PST
Safari 3.0.4 (523.12)
Mark Rowe (bdash)
Comment 3 2007-11-17 15:44:27 PST
We'll need access to a site on which we can reproduce this before we can investigate this issue. The use of the keychain happens entirely at the Safari level, so I suspect that this may need to be moved to Radar. Doing some preliminary investigation here wouldn't hurt though and would provide a bit of information for any others that hit this problem.
Graham Perrin
Comment 4 2007-11-18 03:03:36 PST
(In reply to comment #3) > We'll need access to a site on which we can reproduce this before we can > investigate this issue. Investigators may register themselves at <http://perrin.redirectme.net:8080/> - that's my laptop, not an ideal 24/7 test environment, but it'll do for starters.
Graham Perrin
Comment 5 2007-11-18 03:16:10 PST
See my additional comment at http://dev.plone.org/plone/ticket/7373#comment:4 I wonder whether the design of the (alternate) login dialogues is contributory to the issues.
Mark Rowe (bdash)
Comment 6 2007-11-18 03:19:00 PST
Created attachment 17364 [details] Standalone page demonstrating the issue Thanks for the URL. I've attached a standalone version of the log-in page that can be used. Steps to reproduce: 1) Load page. 2) Click "Site login". 3) Enter username/password. 4) Confirm that you wish Safari to save your password. 5) When page finishes loading, click "Site login" again. 6) Note that username/password is not autofilled. The issue here is that the username/password box are hidden when the page is loaded, so Safari will not see them when doing it's autofill. This is now definitely a Safari issue so I will migrate this bug to Radar.
Mark Rowe (bdash)
Comment 7 2007-11-18 03:20:15 PST
Also adding NeedsReduction keyword because I didn't do much reducing of the test case: only enough to remove all external dependencies.
Mark Rowe (bdash)
Comment 8 2007-11-18 03:21:13 PST
Mark Rowe (bdash)
Comment 9 2007-11-18 03:21:56 PST
Closing as INVALID to reflect that the issue here is outside of WebKit. Thanks for the bug report.
John Sullivan
Comment 10 2007-12-04 14:59:45 PST
Note this comment from Mark: The issue here is that the username/password box are hidden when the page is loaded, so Safari will not see them when doing it's autofill. That's a security change in Safari 3. It's possible that Safari might one day find another way to address this kind of issue, but for now the best bet is for the site to be redesigned to have the username/password fields visible when the page loads.
Graham Perrin
Comment 11 2007-12-04 17:06:20 PST
Thanks, I'll post a note to Plone Core Developers http://www.nabble.com/Core-Developers-f6745.html for their consideration.
Graham Perrin
Comment 12 2007-12-18 10:51:07 PST
Re http://dev.plone.org/plone/ticket/7373#comment:9 Plone may be customised to work around the issue. Re http://dev.plone.org/plone/ticket/7373#comment:14 I have bug-reported to Apple, but as this behaviour is associated with > a security change in Safari 3 I don't imagine that Apple will revert auto-complete behaviour to suit the design of such pages.
Note You need to log in before you can comment on or make changes to this bug.