Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password entry type data is sent when LastPass automatically fill wrong password-> login is not successful #240

Open
rleitan opened this issue Oct 26, 2018 · 1 comment

Comments

@rleitan
Copy link

rleitan commented Oct 26, 2018

[Prerequisites]:
Install LastPass and save an email address +password

[Steps to reproduce]:
1.Open sso.allizom.org
2.Enter a valid LDAP email address ( different from the one saved in LastPass)
3.The password field is automatically filled with a wrong password (saved in LastPass for another account) -> click Enter
4.Enter the valid password for the account entered in step 2

[Expected result]:
Step3: Wrong Email or Password message displayed
Password entry - Machine
Step 4: Successful login
Password entry - Human
Should be sent info about password entry type only when the login is successful

[Actual result]:
Step3: Wrong Email or Password message displayed
Password entry - Machine
Step 4: No data sent about password entry type when login is successful

[Note]:
This is a LastPass issue which affects the password entry data sent

@hidde
Copy link
Contributor

hidde commented Nov 5, 2018

This is correct, we only look at password entry type at the first time, so that we're not counting the same user twice. I realise we can't really avoid that anyway, but at least in this case we try.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants