nextcloud / nextcloud/passman

Credetials created through api are not visible by passman front-end / extension

Open
#574 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

question
Dominant language
JavaScript
Stars
823
Forks
117
Avg merge
1d 21h
Merged PRs (30d)
8

Description

Bug report

Steps to reproduce
  1. add credential through api
  2. login into vault
  3. see "An error occurred during decryption" error
Expected behaviour

Once a credentials are created through api those credentials should will be visible in passman app / extension

Actual behaviour

Once created through api those credentials are not visible in browser extension neither in passman app (here once entered into some vault with credentials created through api we will experiencing a message during credentials enryption such as "An error occurred during decryption") from here https://github.com/nextcloud/passman/blob/master/js/app/controllers/credential.js#L78

Configuration

Operating system: any

Browser: any browser

Extensions that might cause interference:

Passman version: latest

Operating system: any

Web server:

Database:

PHP version: 7.x

cloud server: Nextcloud

cloud version: 15.x

An example of json for creating new vault credential

{
        'vault_id': 1,
        'label': 'label',
        'username': 'encrypted',
        'password': 'encrypted',,
        'hidden': false
}

NB:
If i call https://github.com/nextcloud/passman/blob/master/docs/api.md#get-vault-get i see correctly the previous created credentials through api


Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with js/app/controllers/credential.js#L78 and compare how credentials returned by the API are handled in the front end and extension. Review the docs/api.md get-vault response and the example API payload, then reproduce the decryption error. Done means credentials created through the API are visible and usable in both the Passman app and browser extension.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
api, frontend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
28/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.