As a user, I want to have the credentials automatically filled when I launch a credential’s URL or navigate to a matching URL, so that I skip the manual autofill step.
Q1. What is the problem that you are trying to solve?
When navigating to a page whos credentials were saved, i.e. upon session resumption after reboot, or you open a credential’s URL from quick-access (see this feature “request”), the login form is not filled.
Q2 - Who is impacted?
Users who open logins by launching their URL from quick-access, who restart the brwoser or resume a session. The option is off by default, so it only affects those who turn it on.
Q3 - Why is it important and/or urgent?
Not urgent. A small, backwards-compatible quality-of-life change. Off by default, so nothing changes for anyone who does not want it.
Q4 - What is your proposed solution? (optional)
A local per device “autofill on launch” setting on a new options page, off by default. When it is on, launching a credential’s URL fills the login form once the page has loaded. The form is filled, never submitted.
The fill is deliberately narrow:
- it runs over https only; plain http is refused;
- it re-checks the loaded page’s address against the resource’s stored URL just before filling, so a redirect cannot receive the credential;
- the setting is a single value in local storage, never synced and never sent to the API.
We have a working implementation with tests (PR #268), happy to rebase onto whichever branch you prefer.
If you have any questions, please do not hesitate to ask me.
Cheers
Mike
