Question How to code a Javascript login form to trigger 1Password

aljungberg

We are writing a pure JavaScript application. Login happens through custom UI widgets.



I have been able to coax 1Password into filling out a hidden iframe with 'username' and 'password' labeled input boxes. This data can then be read by the JavaScript app to do the actual login when the hidden submit button is pushed. So auto filling with 1Password works.



However, for some reason 1Password never offers to remember the login and password in the first place, even when the hidden form is filled out and the submit button is programmatically clicked.



What does 1Password react on exactly before offering to save a password? I noticed that it didn't seem to react when I signed in to this forum either so I guess the conditions are fairly specific.



Thanks,

Alexander Ljungberg

[Deleted User]

Maybe totally different, and I'm not questioning your reasons/motives, but what you're trying to do sure [I]sounds[/I] (to me) similar to this autocomplete exploit:



[url=http://arstechnica.com/security/news/2010/07/vendor-inaction-leads-researcher-to-disclose-safari-ie-flaw.ars]Vendor inaction leads researcher to disclose Safari, IE flaw[/url]



[I]Grossman says attackers can simply create a page with hidden form fields that use JavaScript to enter letters and numbers into each field until it finds one that's a hit, and the browser autocompletes it.[/I]

aljungberg

The exploit you are describing is a way to make the browser fill in forms you didn't intend to or even in secret with data from your address book. Since 1Password only fills out forms when you ask it to that exploit is not applicable with 1Password.



Either way it's not related to what I'm asking. I'm asking how to get 1Password to [I]remember[/I] something, not to give something up.

[Deleted User]

[quote name='aljungberg']The exploit you are describing …[/quote]

Not my description, just quoted it. :)



[quote]Since 1Password only fills out forms when you ask it to that exploit is not applicable with 1Password.[/quote]

Thought that was the case.



[quote]I'm asking how to get 1Password to [I]remember[/I] something, not to give something up.[/QUOTE]

Thanks for the clarification. Makes sense to me now.