krtek4 / MultiPass

Automatically login to Basic Authentication using data based on URL regexp.
http://gilles.crettenand.info/MultiPass
Do What The F*ck You Want To Public License
88 stars 23 forks source link

Firefox: requests from DevTools not authenticating #105

Closed klaus-aunds closed 2 months ago

klaus-aunds commented 2 months ago

First: thanks a lot for maintaining this extension, it has saved me many hours of typing credentials!

The issue: Loading source maps from Firefox' DevTools generates a new request to the website. The basic auth authentication only works if the credentials are already saved in Firefox' password manager. Otherwise it'll just fail with a 401. MultiPass doesn't manage this requests at the moment.

Steps to reproduce:

Bildschirmfoto 2024-08-16 um 15 23 06

Possible solutions: The most logical solution would be to let MultiPass handle these requests too, but I'm unsure if that's possible. Saving the credentials successfully managed by MultiPass into the Firefox password manager automatically could be an option, but implementing it may not be possible and it's a feature some users would prefer not to have.

krtek4 commented 2 months ago

Hello,

Thanks for the kind words.

Regarding your issues, I am afraid that the extension already has all the possible rights to handle all kinds of requests and if it doesn't work for sourcemaps I am fairly certain there's nothing I can do. In my opinion, it's more of a bug of Firefox and you could maybe open a ticket here on firefox ( https://bugzilla.mozilla.org/home ) to let them know.

As for saving the credentials in the password manager, again I am not certain, but I am fairly sure that extension are sandboxed from it in order to avoid any security issue.

Also, sadly, I don't use the extension anymore and don't have time to work on it. If it had been an easy fix I would have made it, but this would surely involve a lot of research just to determine if it's feasible. I will gladly merge any kind of pull request improving the extension or offer a bit of help, but I can't start working on something like that.

Sorry not being more helpful, cheers.

klaus-aunds commented 2 months ago

Dear @krtek4, thanks for the detailed response. I can totally understand that you aren't able to invest time in the extension, especially since you don't even use it anymore.

I agree that this smells more like a bug in Firefox itself. Chrome at least handles almost the exact same situation (with this extension https://chromewebstore.google.com/detail/basic-authentication/nanfgbiblbcagfodkfeinbbhijihckml) authenticating the request to the source maps automatically.

I'm closing the issue here, will post the link to bugzilla once I open a ticket there.

All the best and many thanks again!