topic Re: Don't save user Id field in the login page for reference in Alfresco Forum

Don't save user Id field in the login page for reference

akash251998 — Wed, 12 Aug 2020 06:45:44 GMT

When wo do login in alfresco it automatically saves the user name for future reference . I am attaching the pic for better understanding of the issue.

Pic 1:

error

As in the above pic we can see that on typing a it is giving n number of username of DMS that starts with the name a.

Pic 2:

err

As in the above pic we can see that on typing s it is suggesting n number of user name.

Our requirement is that we don't want username to be stored like this. Because anyone can type any key and use the user id and can try to login . Its a security issue . So i want that it should not store any information like username for later reference.

System information :-

I am using alfresco 5.2 community version on windows 10 pro. Please suggest any solution.

Dear @EddieMay hope this time also you will help.

Regards

Akash D

Re: Don't save user Id field in the login page for reference

EddieMay — Wed, 12 Aug 2020 10:30:55 GMT

Hi @akash251998,

Login forms remembering usernames is pretty common in my experience & not something I'd immediately see as a vulnerability, especially if the system is not public facing. Also, many Alfresco instances are used with some form of single sign on system too.

However, if you want to remove the remember functionality, you will need to override the login page & add autocomplete=“off” to the username field. You may also need to remove reset cookies on logging out to prevent the username being auto populated.

Here's a tutorial on overrriding the login page - hope this helps.

Re: Don't save user Id field in the login page for reference

akash251998 — Wed, 12 Aug 2020 12:24:06 GMT

Thanks @EddieMay for your help as always.