nextcloud / passman-webextension

Webextension for the Passman Nextcloud app. Also offers browser extension & Android app.
https://passman.cc
GNU Affero General Public License v3.0
114 stars 43 forks source link

Webextension login interferes with browser login #288

Open merrx opened 5 years ago

merrx commented 5 years ago

I use a private nextcloud instance with multiple accounts. The passwords a stored in a vault from user A. I am regularly logged in as user B.

Steps to reproduce

  1. Be logged in as user B in Nextcloud, when the browser is started. I have stored the Master password within the browser, so it should automatically load the passwords.

Expected behaviour

The extension should connect to the database and get all passwords.

Actual behaviour

The extension stays at 0 entries in the database and the reload button doesn't do anything. I have to log out from nextcloud as user B, then the extension can connect to the database and receive the passwords.

Configuration

Operating system: Windows 10 Browser: Firefox Extensions that might cause interference: none, blank FF Passman version: 2.2.1 Extension version: 2.1.1 Nextcloud version: 14.0.4

Additional behaviour:

Having an opened tab of nextcloud in log out state. (the login page) Entering the credentials in the webextension and letting it connect to the database. Reloading the tab shows the files page from the user of the webextension. (the used has been logined)

In principle this issue seems to be related to #280

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/68011524-webextension-login-interferes-with-browser-login?utm_campaign=plugin&utm_content=tracker%2F52236699&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F52236699&utm_medium=issues&utm_source=github).
Oliv4945 commented 5 years ago

@merrx @SyntaxErrol: I can not reproduce the issue. any more hint ?

What I do is setup passman vault from user A while connected to account B. I get the extension fetching correctly passwords from user A.

merrx commented 5 years ago

Sounds similar to my setup. Nextcloud passman vault with user A. User B doesn't have a vault.

Login as user B in the nextcloud. Login as user A in Passman webextension.

Restart browser. You should be (auto-)logged in as B in nextcloud and A in passman extension. But the passman extension doesn't fetch the passwords, it stays at 0 passwords.