Trigger browser to recognize and save password and username for login component

[rnoguera]

Hi,

Has anyone succeed in having browsers (i.e.chrome) to recognize username and password fields for you ?

It works for me when I use the legacy "login" component, but doesn't work when using modern UX with integrated login.

Thanks,

[Steve Wood]

Re: Trigger browser to recognize and save password and username for login component

Check your login component under Properties and uncheck "Autocomplete off"

[rnoguera]

Re: Trigger browser to recognize and save password and username for login component

I am using a UX with integrated login. I am afraid it doesnt show an "Autocomplete off" property...

[Steve Wood]

Re: Trigger browser to recognize and save password and username for login component

At least check your page HTML to see if that is the issue. It will look similar to this:

<input name="userid" autocomplete="off">

[rnoguera]

Re: Trigger browser to recognize and save password and username for login component

I have not been able to find any "autocomplete" property on the UX html code.


It looks like, browsers rely on field name to detect userid and password fields.

"legacy" login components uses standard, recognizable field names:

legacy.png

And userid and password is correctly detected and stored, when using this login.

On the other hand, "modern" UX based login, uses a non-compliant name for the fields:

ux.png

And browsers cannot detect and store these fields correctly.

[cptutrecht]

Re: Trigger browser to recognize and save password and username for login component

I know it took me a fair amount of time to figure this out, but without the help of others i would not have succeeded. So i'm happy to share.
Use case: I use an UX with integrated login. And use local storage. At login the user is given to save UP, change formerly saved UP or delete UP (in a button group)
See screenshot below:

LoginwithSavedCredentials.PNG

The trick is to give name local storage yourself. In our case it was necessary to make this lsaddition customer dependent
Works as a charm as long a user doesn't change the credentials on device and uses the saved credentials on device B ofcourse.

In the client side after login method I have:

var savelogin = {dialog.Object}.getValue('SaveCredentials');
var lsaddition = {dialog.Object}.getSessionVariable('__PROTECTED__LIC_CUSTOMERCODE');
var lsname = "myLoginInfo_" + lsaddition;

switch(savelogin) {
case "save":
var userId = {dialog.Object}.getValue('USERNAME');
var pWord = {dialog.Object}.getValue('PASSWORD');
var logInfo = '[{ "userId":"' + userId + '" , "pWord":"' + pWord + '" }]';
localStorage.setItem(lsname,logInfo);
//alert('i do save:'+ lsname);
break;
case "keep":
//do nothing, we keep what has been previously stored
//alert('i do keep');
break;
case "delete":

localStorage.removeItem(lsname);
//alert('i do delete:' + lsname);
break;
default:
//do nothing, we keep what has been previously stored

}

Then you are able to restore the login values in the client side onrendercomplete event with:

var lsaddition = {dialog.Object}.getSessionVariable('__PROTECTED__LIC_CUSTOMERCODE');
var lsname = "myLoginInfo_" + lsaddition;

var myInfo = localStorage.getItem(lsname);
if(myInfo != null){
var logObj = JSON.parse(myInfo);
{dialog.Object}.setValue('USERNAME',logObj[0].userId);
{dialog.Object}.setValue('PASSWORD',logObj[0].pWord);
}

[rnoguera]

Re: Trigger browser to recognize and save password and username for login component

Thanks Ger,

If I understand correctly, your solution does not rely on browser password recognition and storage but on local storage to store your passwords.

I am looking for a solution that is based on browser password storage.

[rnoguera]

Re: Trigger browser to recognize and save password and username for login component

I got an official answer from Alpha: Browser based password recognition and storage will not be supported for UX with integrated login.

The legacy login component supports this feature.

Unfortunately the legacy login component has limited mobile support.

[cptutrecht]

Re: Trigger browser to recognize and save password and username for login component

I got an official answer from Alpha: Browser based password recognition and storage will not be supported for UX with integrated login.

The legacy login component supports this feature.

Unfortunately the legacy login component has limited mobile support.

Just curious, why not use locale storage, it's easy to implement.
And if one wants to make it more secure one could implement it more save using this.

[rnoguera]

Re: Trigger browser to recognize and save password and username for login component

When using browser password storage, the management and security of the passwords is handled by the browser.

Browser developers have lots of resources to achieve and maintain a high level of security.

I am not so comfortable storing user passwords in local storage.
Do you think local storage provides sufficient security?

[cptutrecht]

Re: Trigger browser to recognize and save password and username for login component

Just my opinion.

Depends on type of application what level of security is required. Sometimes one should not store password anywhere, also not at the browser....
And yes i will try figure out how to add encryption to the code i use now..... (if you do so, pls post the adjusted code :-)
But: the FBI can hack Iphones i understood without the help of Apple :-)

First line of defence is of course the security settings of the device itself...

Last but not least: it is not the programmers decision but the user's to store it.
Maybe it's elegant to provide him at the moment he chooses to do so, information about the level of security of the implemented storage method / display a disclaimer.....