Basic auth / 1password mini

Options
mickael
mickael
Community Member
edited May 2019 in 1Password in the Browser

Hi,

Correct me if I am wrong.

I have quickly read posts on the forum stating that there won't be "basic auth" support due to lack of browser API support.

To auto authenticate, on those websites, authentication must be passed with the request.

But, how can I emit that kind of request using 1Password mini?

If I click on "open and fill", that doesn't work, should I create some custom meta data?

Thanks,


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

Comments

  • Ben
    Options

    @mickael

    I don't know of any way in which we'd be able to recommend doing this. That said, I'd be happy to move this thread to the Lounge and leave it open in case anyone from the community has an idea they'd like to share. Please let me know if you'd like for me to do that.

    Ben

  • chadseld
    Options

    I think some older websites will respond to the format http://user:passwd@www.server.com/index.html. However, this is not a recommended pattern due to the likelihood of that request being logged to disk at some point, and your password is being sent in the open, not over a secure connection.

    The best approach with basic auth is to get comfortable with 1Password mini's keyboard shortcuts:
    Command-Option-\ to open 1P mini
    Command-Shift-C to copy Password
    etc...

  • mickael
    mickael
    Community Member
    Options

    @chadseld Yes of course, but I thought 1Password mini could emit the request and passing the credentials not as part of the URL but as a request header.

    But, maybe, this is not possible to open default browsers with such kind of requests and they only support plain url.

    @ben I may have misunderstood/read too quickly the long post about basic auth, because I had reached the conclusion that 1PasswordX was able to support basic auth when asking to open the website from it. But, as 1PasswordX is a browser extension, it may be able to pass request headers also ?

  • chadseld
    Options

    I see. Yes the 1Password X extension has better handling for http auth. At this time, it's a different extension than the one that integrates with the desktop app, and it's still lacking Safari support. We are working on improving this situation. But for now, we don't have http auth support in the standard browser extension.

  • mickael
    mickael
    Community Member
    Options

    @chadseld Ok, that's clear. Thanks.

  • Ben
    Options

    :+1: :)

    Ben

This discussion has been closed.