Bug 16027 – Safari can't interact with Mac OS keychain for 'Site login' at Plone 3 portals with OpenID Authentication Support 1.0-b1 installed

• Status: RESOLVED
• Resolution: INVALID
• Component: New Bugs

[Graham Perrin]

WebKit nightly and Safari fail to interact with Mac OS keychain for 'Site login' at Plone 3 portals with OpenID Authentication Support 1.0-b1 installed

See http://dev.plone.org/plone/ticket/7373

This may be perceived as an issue with WebKit nightly. 

If you'd like access to a server on which the issue is reproducible, just ask.

[Mark Rowe (bdash)]

What version of Safari are you using?

[Graham Perrin]

Safari 3.0.4 (523.12)

[Mark Rowe (bdash)]

We'll need access to a site on which we can reproduce this before we can investigate this issue.

The use of the keychain happens entirely at the Safari level, so I suspect that this may need to be moved to Radar.  Doing some preliminary investigation here wouldn't hurt though and would provide a bit of information for any others that hit this problem.

[Graham Perrin]

(In reply to comment #3)

> We'll need access to a site on which we can reproduce this before we can
> investigate this issue.

Investigators may register themselves at 
<http://perrin.redirectme.net:8080/> - that's my laptop, not an ideal 24/7 test environment, but it'll do for starters. 

[Graham Perrin]

See my additional comment at 
http://dev.plone.org/plone/ticket/7373#comment:4

I wonder whether the design of the (alternate) login dialogues is contributory to the issues. 

[Mark Rowe (bdash)]

Created attachment 17364 [details]
Standalone page demonstrating the issue

Thanks for the URL. I've attached a standalone version of the log-in page that can be used.

Steps to reproduce:
1) Load page.
2) Click "Site login".
3) Enter username/password.
4) Confirm that you wish Safari to save your password.
5) When page finishes loading, click "Site login" again.
6) Note that username/password is not autofilled.

The issue here is that the username/password box are hidden when the page is loaded, so Safari will not see them when doing it's autofill.  This is now definitely a Safari issue so I will migrate this bug to Radar.

[Mark Rowe (bdash)]

Also adding NeedsReduction keyword because I didn't do much reducing of the test case: only enough to remove all external dependencies.

[Mark Rowe (bdash)]

<rdar://problem/5607170>

[Mark Rowe (bdash)]

Closing as INVALID to reflect that the issue here is outside of WebKit.  Thanks for the bug report.

[John Sullivan]

Note this comment from Mark:

The issue here is that the username/password box are hidden when the page is
loaded, so Safari will not see them when doing it's autofill.

That's a security change in Safari 3. It's possible that Safari might one day find another way to address this kind of issue, but for now the best bet is for the site to be redesigned to have the username/password fields visible when the page loads.

[Graham Perrin]

Thanks, I'll post a note to 
Plone Core Developers 
http://www.nabble.com/Core-Developers-f6745.html for their consideration. 

[Graham Perrin]

Re http://dev.plone.org/plone/ticket/7373#comment:9 Plone may be customised to work around the issue. 

Re http://dev.plone.org/plone/ticket/7373#comment:14 I have bug-reported to Apple, but as this behaviour is associated with 

> a security change in Safari 3

I don't imagine that Apple will revert auto-complete behaviour to suit the design of such pages.