Authenticator-Extension / Authenticator

Authenticator generates 2-Step Verification codes in your browser.
https://authenticator.cc
MIT License
3.28k stars 778 forks source link

all_urls permission present #1317

Open jheld opened 1 week ago

jheld commented 1 week ago

Describe the issue

Unknown permission. If see this message, please send a bug report. ### Browser Firefox ### Browser Version 130.0.1 ### Extension Version 8.0.2
mymindstorm commented 1 week ago

Where did you see this?

jheld commented 1 week ago

Clicked on the permissions entry in the menu pop up.

Sneezry commented 1 week ago

Where did you see this?

It seems Firefox doesn't revoke that permission automatically. Though we have removed it from manifest.

@jheld do you install 8.0.2 from the store directly or Firefox upgrades the extension to 8.0.2 from a previous version?

jheld commented 1 week ago

Ah. I've had this installed for awhile and looking in firefox's extension setting for this: Last Updated, September 20, 2024. Good call.

Sneezry commented 1 week ago

Ah. I've had this installed for awhile and looking in firefox's extension setting for this: Last Updated, September 20, 2024. Good call.

Thanks for the information. We had required all urls permission in previous versions due to a Firefox limitation. However, this limitation is resolved in MV3 (manifest version 3), and we removed this permission from the extension. But it seems Firefox hasn't revoked that permission for existing installed extensions. We will keep investigating. I believe the permission should be revoked by reinstalling the extension if you have concern on the warning. Notice, reinstalling the extension will remove all your data, and you should have your data backup first.

jheld commented 4 days ago

Doesn't seem like simply uninstalling and reinstalling worked, but the following did:

  1. uninstall
  2. restart browser
  3. install

thank you for the guidance!