Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ui] Text type to password type input on profile sign-in page #17345

Conversation

philrenaud
Copy link
Contributor

Resolves #16901

Changes ACL Token/JWT input field to be of type "password", enabling password managers and triggering browsers to store it sensitively.

I considered adding a "show token" button but opted against it for keeping overhead low.

@github-actions
Copy link

github-actions bot commented May 29, 2023

Ember Test Audit comparison

main e1577ce change
passes 1475 1475 0
failures 0 0 0
flaky 0 0 0
duration 11m 14s 943ms 12m 06s 144ms +51s 201ms

Copy link
Contributor

@lgfa29 lgfa29 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. It may be worth a changelog entry since it's a user-facing change.

@philrenaud philrenaud force-pushed the 16901-security-fr-uisettingstokens-input-field-type-as-password-to-guide-autofill-vs-password-manager-logic branch from 73f25e5 to e1577ce Compare May 30, 2023 18:23
@philrenaud philrenaud merged commit 473bae7 into main May 30, 2023
12 of 13 checks passed
@philrenaud philrenaud deleted the 16901-security-fr-uisettingstokens-input-field-type-as-password-to-guide-autofill-vs-password-manager-logic branch May 30, 2023 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security FR: ui/settings/tokens input field type as 'password' to guide autofill vs. password manager logic
3 participants