Community
Participate
Working Groups
I am trying to "Edit my profile" here (https://accounts.eclipse.org/users/ytang6oj/edit), but the system keeps complaining with the message: "The specified passwords do not match" even if my password is correct.
I believe this is caused by the browser prepopulating the first password field in the Change Password section on the Account Settings tab. Since that tab is not shown, it's not clear to the user which passwords do not match.
(In reply to Denis Roy from comment #1) > I believe this is caused by the browser prepopulating the first password > field in the Change Password section on the Account Settings tab. > > Since that tab is not shown, it's not clear to the user which passwords do > not match. Correct! I found this helpful article on the subject: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion "In some cases, the browser will continue suggesting autocompletion values even if the autocomplete attribute is set to off. This unexpected behavior can be quite puzzling for developers. The trick to really enforcing non-autocompletion is to assign an invalid value to the attribute, for example: autocomplete=“nope”" We can try adding an invalid value to the autocomplete attribute. The problem here is that behavior might not apply to all browsers or could change in a future update. An alternative would be the jQuery disableAutoFill Plugin: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion
I created a first patch for this: https://foundation.eclipse.org/r/2851 This patch will add an invalid value to the password field as suggested in: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion I will try to deploy this today on production. I will update the bug once it's there! I will need the help of the community to test this since I am unable to reproduce this usability issue. This issue might take a few tries before we get it right.
Our patch is now on production. Can someone verify if this made a difference?
Tested. The bug is fixed. Great job.
(In reply to Sugar Tang from comment #5) > Tested. The bug is fixed. Great job. Great! Thanks for helping us fix this issue!
Either this bug has not been fixed, or the change has not be publicly distributed. Any attempt I make to change anything in my profile fails with the "The specified passwords do not match.". https://accounts.eclipse.org/users/jkruegerip3
(In reply to James Krueger from comment #7) > Either this bug has not been fixed, or the change has not be publicly > distributed. > Any attempt I make to change anything in my profile fails with the "The > specified passwords do not match.". > https://accounts.eclipse.org/users/jkruegerip3 What browser are you using?
Firefox 60.2.1esr on Windows 7. This problem is also being seen by ed.bratt@oracle.com
(In reply to James Krueger from comment #9) > Firefox 60.2.1esr on Windows 7. > > This problem is also being seen by ed.bratt@oracle.com Some users are suggesting that we use: autocomplete="new-password" I will try to use autocomplete="new-password". If that does not work, we will need to consider changing how/where we load the new password fields. https://www.chromium.org/developers/design-documents/form-styles-that-chromium-understands
(In reply to Christopher Guindon from comment #10) > (In reply to James Krueger from comment #9) > > Firefox 60.2.1esr on Windows 7. > > > > This problem is also being seen by ed.bratt@oracle.com > > Some users are suggesting that we use: > > autocomplete="new-password" > > I will try to use autocomplete="new-password". If that does not work, we > will need to consider changing how/where we load the new password fields. > > https://www.chromium.org/developers/design-documents/form-styles-that- > chromium-understands (In reply to James Krueger from comment #9) > Firefox 60.2.1esr on Windows 7. > > This problem is also being seen by ed.bratt@oracle.com We are now using autocomplete="new-password". Could you confirm if you see a difference with Firefox?
*** Bug 540088 has been marked as a duplicate of this bug. ***
After reading this, I opened the account settings and cleared the 'change your password' field -- then was able to upload my avatar. Whatever causes this to happen is still broken, but the workaround here did solve the problem.
(In reply to Ed Bratt from comment #13) > After reading this, I opened the account settings and cleared the 'change > your password' field -- then was able to upload my avatar. Whatever causes > this to happen is still broken, but the workaround here did solve the > problem. Hi Ed, Could you let us know what browser and the version that you are using?
Firefox Quantum (ESR). 60.2.2esr
There problem still remains. I tried to upload a new photo here (https://accounts.eclipse.org/users/<username>/edit). The system keeps complaining about "The specified passwords do not match."
*** Bug 545915 has been marked as a duplicate of this bug. ***
(In reply to Christopher Guindon from comment #17) > *** Bug 545915 has been marked as a duplicate of this bug. *** We tried a few things last week but none of them were successful. We now think that the only way to solve this would be to move the "change my password" feature on a separate page.
*** Bug 546919 has been marked as a duplicate of this bug. ***
I am upping the priority since this is something that we should fix soon!
We have recently add an autocomplete="new-password" attribute to the new password fields. I believe the password do not match issue has been fixed because of this update. Please reopen this bug if there's still an issue with the password fields. Thanks.
