PhilippC / PhilippC/keepass2android

[BUG] Using AutoFill on a Basic authentication popup while the database is still locked returns "401 Unauthorized"

Open
#2,422 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
C#
Stars
6.2k
Forks
478
Avg merge
1h 4m
Merged PRs (30d)
2

Description

Checks
  • I have read the FAQ section, searched the open issues, and still think this is a new bug.
Describe the bug you encountered:

The steps to reproduce are as follows:

  1. Load a webpage which requires Basic auth using Firefox or Chrome
  2. The Basic auth popup appears, select the username field and then the option to aufill with Kepass2Android (using the long press popup menu or the button in GBoard)
  3. Select the desired credential set
  4. The auth popup gets autofilled and disappears, the page starts loading but return a "401 Unauthorized" error.
  5. Reloading or closing and reopening the page asks for the credentials again.
  6. Now that the databse is already unlocked the login works as expected.

Note that unlocking the databse before loading the page makes the authentication work correctly right from the first try.

Describe what you expected to happen:

The login should work as expected without needing to closing or reloading the page a second time.

What version of Keepass2Android are you using?

1.09e-r7

Which version of Android are you on?

12

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file or test is named. First reproduce the Basic-auth and KeePass2Android autofill flow on Android 12 with the database locked, then trace the authentication and autofill handling involved in the first request. Done means the initial authentication succeeds without reloading or reopening the page.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, csharp
Domain
authentication, mobile
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.