Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Separate password caches for WebUI and IMAP (Trac #1910) #86

Open
str4d opened this issue Apr 16, 2017 · 1 comment
Open

Separate password caches for WebUI and IMAP (Trac #1910) #86

str4d opened this issue Apr 16, 2017 · 1 comment

Comments

@str4d
Copy link
Member

str4d commented Apr 16, 2017

The IMAP API as originally implemented uses the same internal password cache for logging in as the WebUI. This has the side-effect of the WebUI being unlocked while a mail client is authenticated with IMAP, which is unintuitive and unlikely to match user expectations.

The password cache system should be extended with independent authentication contexts.

Migrated from https://trac.i2p2.de/ticket/1910

{
    "status": "assigned", 
    "changetime": "2017-01-17T12:48:22", 
    "description": "The IMAP API as originally implemented uses the same internal password cache for logging in as the WebUI. This has the side-effect of the WebUI being unlocked while a mail client is authenticated with IMAP, which is unintuitive and unlikely to match user expectations.\n\nThe password cache system should be extended with independent authentication contexts.", 
    "reporter": "str4d", 
    "cc": "", 
    "resolution": "", 
    "_ts": "1484657302682027", 
    "component": "apps/plugins", 
    "summary": "Separate password caches for I2P-Bote WebUI and IMAP", 
    "priority": "minor", 
    "keywords": "I2P-Bote security", 
    "version": "0.9.28", 
    "parents": "", 
    "time": "2017-01-03T18:20:23", 
    "milestone": "undecided", 
    "owner": "str4d", 
    "type": "defect"
}
@str4d str4d added this to the undecided milestone Apr 16, 2017
@str4d
Copy link
Member Author

str4d commented Apr 17, 2017

Trac update at 20170117T12:48:22:

  • zzz changed owner from "" to "str4d"
  • zzz changed status from "new" to "assigned"
  • zzz changed version from "" to "0.9.28"

@str4d str4d removed defect labels Apr 17, 2017
@str4d str4d changed the title Separate password caches for I2P-Bote WebUI and IMAP (Trac #1910) Separate password caches for WebUI and IMAP (Trac #1910) Apr 18, 2017
@str4d str4d removed this from the undecided milestone Apr 7, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant