search

Authenticator-Extension / Authenticator

Authenticator generates 2-Step Verification codes in your browser.
https://authenticator.cc
MIT License
3.42k stars 798 forks source link

Revoking permissions doesn't work as expected #1222

Closed Sneezry closed 3 months ago

Sneezry commented 4 months ago

Describe the issue

A user has reported an issue with revoking permissions on the Permissions page in the settings. When they click the Revoke button, the permission disappears from the Permissions page, but the extension still retains the permission in Chrome's built-in extension info page.

This might be a Chrome issue. We use the chrome.permissions.remove method to revoke permissions, and it works as expected in Firefox.

https://github.com/Authenticator-Extension/Authenticator/blob/6f2c49286f9fc2f3407e65dbee62c97cf8335b4f/src/store/Permissions.ts#L225-L260

I found a related bug reported in the Chromium community in 2012, which is still active: Chromium Issue 40188585.

We may need to inform users to revoke permissions directly in Chrome's built-in extension info page instead of the extension's Permissions page.

Browser

Chrome

Browser Version

126.0.6478.127

Extension Version

7.0.0

Sneezry commented 4 months ago

This is as designed in Chrome:

image

https://chromium.googlesource.com/chromium/src/+/main/extensions/docs/permissions.md