topic Disable password saving option while login in Alfresco Forum

Disable password saving option while login

ayushi_agrahari — Tue, 15 May 2018 12:27:22 GMT

Hi all,I want to disable the browser password saving option due to security issues while doing the login.Is there any way through which I can disable the password saving option?I mean to say that I have to make changes in some files through which I can disable the password saving option? Below is th

Re: Disable password saving option while login

calvo — Tue, 15 May 2018 14:58:30 GMT

Hi,

I think it depends on your browser not Alfresco.

Regards,

clv

Re: Disable password saving option while login

rupeshsawaliya — Tue, 15 May 2018 15:58:22 GMT

Hi,

Check this link security - Disable browser 'Save Password' functionality - Stack Overflow

hope it will help.

Regards,

Rupesh

EnProwess Technologies

Re: Disable password saving option while login

calvo — Wed, 16 May 2018 07:22:50 GMT

Hi,

As Rupesh Sawaliya‌ says, you can modify Alfresco login page.

To do this, you must follow this steps:

.- Find the document "login.get.html.ftl" located at: "\tomcat\webapps\share\WEB-INF\classes\alfresco\site-webscripts\org\alfresco\components\guest"

.- Copy the file to: "\tomcat\shared\classes\alfresco\web-extension\site-webscripts\org\alfresco\components\guest"

If any folder don´t exists, you must create it

.- Modify this file adding the attribute: autocomplete="off" (only adding this string)

<@markup id="form">
<form id="${el}-form" accept-charset="UTF-8" method="post" action="${loginUrl}" class="form-fields login ${edition}" autocomplete="off">
<@markup id="fields">
<input type="hidden" id="${el}-success" name="success" value="${successUrl?replace("@","%40")?html}"/>
<input type="hidden" name="failure" value="${failureUrl?replace("@","%40")?html}"/>
<div class="form-field">
<label for="${el}-username">${msg("label.username")}</label><br/>
<input type="text" id="${el}-username" name="username" maxlength="255" value="<#if lastUsername??>${lastUsername?html}</#if>" />
</div>
<div class="form-field">
<label for="${el}-password">${msg("label.password")}</label><br/>
<input type="password" id="${el}-password" name="password" maxlength="255" />
</div>
<div class="form-field">
<input type="checkbox" id="showpassword" onclick="showPassword('${el}-password')"/>
<label for="showpassword"> Mostrar clave</label><br/>
</div>
</@markup>
<@markup id="buttons">
<div class="form-field">
<input type="submit" id="${el}-submit" class="login-button" value="${msg("button.login")}"/>
</div>
</@markup>
</form>
</@markup>

Sometimes the browser has unexpected behaviour, so you can "force" with: autocomplete="any-string" (for example: autocomplete="no-complete"

After restart Alfresco service, it should work.

Regards,

clv

Re: Disable password saving option while login

ayushi_agrahari — Wed, 16 May 2018 09:09:28 GMT

Hi Jose,

I have tried ur solution by putting the attribute autocomplete="off" but it is still asking the option for saving the password or not.I have put my login.get.html.ftl file in my project on location share/src/main/resources/alfresco/web-extension/site-webscripts/org/alfresco/components/guest/login.get.html.ftl.Below is the the code in my login.get.html.ftl file

   <@markup id="form">
         <form id="${el}-form" accept-charset="UTF-8" method="post" action="${loginUrl}" class="form-fields login" autocomplete="off">
            <@markup id="fields">
            <input type="hidden" id="${el}-success" name="success" value="${successUrl?replace("@","%40")?html}"/>
            <input type="hidden" name="failure" value="${failureUrl?replace("@","%40")?html}"/>
            <div class="form-field">
               <input type="text" id="${el}-username" name="username" maxlength="255" autocomplete="off" value="<#if lastUsername??>${lastUsername?html}</#if>" placeholder="${msg("label.username")}" />
            </div>
            <div class="form-field">
               <input type="password" id="${el}-password" name="password" maxlength="255" placeholder="${msg("label.password")}" />
            </div>
            </@markup>
            <@markup id="buttons">
            <div class="form-field">
               <input type="submit" id="${el}-submit" class="login-button" value="${msg("button.login")}"/>
            </div>
            <div class="form-field">
               <input type="button" id="${args.htmlid}-resetPassword" class="login-button hidden"
                  value="${msg("button.resetPassword")}"/>
           </div>
            </@markup>
         </form>
      </@markup>

Any other alternative u can suggest?

Thanks and Best Regards

Ayushi Agrahari

Re: Disable password saving option while login

jayesh_prajapat — Wed, 16 May 2018 11:50:13 GMT

This is not possible in modern browsers. The one you tried is for auto completion turn off. it will not help in this context. Please see following link.

html - How to prevent a browser from storing password - Stack Overflow

Regards
Jayesh
www.enprowess.com

Re: Disable password saving option while login

ayushi_agrahari — Thu, 17 May 2018 07:48:16 GMT

Hi Jayesh

I have read the above link given by you and also tries one of the solution by making the new hidden type username and passwords and then copying the visible username and password to the hidden fields(username and password) in login.get.html.ftl file located at the project path share/src/main/resources/alfresco/web-extension/site-webscripts/org/alfresco/components/guest/login.get.html.ftl in the following way

<@markup id="form">
             <div class="form-field">
               <input type="text" id="${el}-username" name="username" maxlength="255" autocomplete="off" value="<#if lastUsername??>${lastUsername?html}</#if>" placeholder="${msg("label.username")}" />
            </div>
            <div class="form-field">
               <input type="password" id="${el}-password" name="password" maxlength="255" placeholder="${msg("label.password")}" />
            </div>

         <form id="${el}-form" accept-charset="UTF-8" method="post" action="${loginUrl}" class="form-fields login" autocomplete="off">
            <@markup id="fields">
            <input type="hidden" id="${el}-success" name="success" value="${successUrl?replace("@","%40")?html}"/>
            <input type="hidden" name="failure" value="${failureUrl?replace("@","%40")?html}"/>


            <input type="hidden" id="hiddenUserName" name="username" />
           <input type="hidden" id="hiddenPassword" name="password" />

            </@markup>
            <@markup id="buttons">
            <div class="form-field">
               <input type="submit" id="${el}-submit" class="login-button" value="${msg("button.login")}"/>
            </div>
            <div class="form-field">
               <input type="button" id="${args.htmlid}-resetPassword" class="login-button hidden"
                  value="${msg("button.resetPassword")}"/>
           </div>
            </@markup>
         </form>
         <script type="text/javascript" language="JavaScript">
            $("#${el}-form").submit(function() {
          $("#hiddenUsername").val($("#${el}-username").val());
           $("#hiddenPassword").val($("#${el}-password").val());
});
        $("#${el}-username,#${el}-password").keypress(function(e) {
    if (e.which == 13) {
      $("#${el}-form").submit();
    }
});
</script>
      </@markup>

but no luck.the browser is still asking for the option to save the password or not.

Any help would be greatly appreciated

Thanks and Regards

Ayushi Agrahari

Re: Disable password saving option while login

jayesh_prajapat — Thu, 17 May 2018 08:35:14 GMT

Browser ask for password to save if it finds input type as password in DOM. Only way to avoid browser to ask saving password is to avoid using type="password"

This is tricky. I'm not sure if there is any component which works as a password component but its type is not password

Re: Disable password saving option while login

ayushi_agrahari — Thu, 17 May 2018 11:07:46 GMT

Hi jayesh,

As per ur suggestion,I have changed the input type="password to input type="text" and provided a css property webkit-text-security:disc that converts the text type used for password to disc form as following

but since the css property -webkit-text-security:disc; works only for chrome not for firefox,so,I the password field is visible to the user in firefox

So,Is there any css property that is commonly applicable for converting the text form to bullets in both chrome and firefox.or is there any other way of doing this

Thanks and Regards

Ayushi Agrahari