HTTP Basic Authentication not supported in Safari 5.1

chrisdrackett · June 2011

I've just found that the new extension no longer works with basic auth in safari. This is unfortunate as at work we use this for a ton of pages.

Having to use the 1password app and copy-pasting passwords is going to get old very quickly [img]http://forum.agile.ws/public/style_emoticons/default/sad.gif[/img]

---

[img]http://i.agilebits.com/dt/proven-solution-20110803-121213.png[/img]

Thanks for asking about this. [url="http://help.agilebits.com/1Password3/http_auth.html"]This is a known limitation in Safari[/url]. We are working on a solution to get around the limitation imposed by Apple, but I don't know when or if this will be possible.

Ben · June 2011

[quote name='chrisdrackett' timestamp='1306952601' post='28305']

I've just found that the new extension no longer works with basic auth in safari. This is unfortunate as at work we use this for a ton of pages.

Having to use the 1password app and copy-pasting passwords is going to get old very quickly <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />

[/quote]

Thanks for the report. I'm hoping we'll get that fixed before final release.

Schlaefer · June 2011

Another vote for basic auth support.

In a few weeks there's maybe no current browser with auth support anymore. Hopefully someone is working on FF5 already?

khad · June 2011

Thanks for the vote, Schlaefer! We are working on a great solution to HTTP Auth prompt support not being offered in browsers' native extension APIs. I don't have anything to announce right now, but this is definitely on our radar. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

amgems · June 2011

The current means of filling does not work in all cases.

In cases where the popup modal dialogue of "In order to access this page, you must login" (at least, that is what my DSL modem says).

The 1P button that used to adorn the dialog box is no more.

I can click 1P and authenticate and search for the entry, but clicking on it yields an error: "Safari cannot open the specified address". Hmm. Might be a Safari issue. Firefox, works as before.

Also, on that "Failed to open" page Safari displays, one can click all day on the 1P button but nothing shows. The button "works" as far as visual feedback, but no 1P pop-over. Have to back to a "normal" page for the 1P to work again.

I believe it fails because the login details has "dsl.zepherin.com:80" as the URL, which is what Safari gripes about.

OK. I edited it in 1Password.app, observed that the update propagated to the 1P pop-over, tried the 1P entry with the corrected http://dsl....:80/, and it does not present the credentials. I just go directly to the "401 Unauthorised" page.

I open a blank page, and click 1P, and again, 1P button "works" but no pop-over pops over.

I google "x" to get a non-blank page, and the 1P button works, and the 1P pop-over pops over. I search for "dsl" again, and it again pops up the modal dialogue "in order to access this page...." so no joy.

Summary:

In certain situations, the 1P button is emasculated.

For certain classes of login, notably HTTP_AUTH types where one must interact with a pop-over modal dialog for login, 1P currently does not work.

Solution:

1. can always get to a page where 1P does work

2. can cut and paste, I imagine.

3. Use Firefox for now.

Other issue:

my 1Password DB seems to be quite chokers with lots of examples of URLs which cause Safari to choke, but no problem for Firefox, or older Safari.

Not sure what will happen there. I really do not want to go and edit several hundred of them.

khad · June 2011

Hey amgems,

I moved your post into the HTTP auth thread. Please see above and let me know if you have any additional questions.

The domain matching is still being tweaked as well. Don't go re-saving or editing all your logins just yet. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />

Stefan Schmidt · June 2011

Hi,

with Snow Leopard and the stable 1password version i was able to Command-# saved passwords for that URL even in the Basic or Plain Auth Dialogs that your browser (Safari here) pops out and that do no exist as Forms in Websites. I very much like the convenience that provides, however with Lion DP 4 current and 1Password 3.6.0 this does not seem to work anymore.

Will that feature eventually be available in the near future or did Apple change to much with the Sandbox to recreate it?

[Deleted User] · June 2011

Hello Stefan and welcome to the Forums!

I merged your topic with the appropriate thread.

Please review the comments above, and let us know if you have additional questions.

Brandt

Examinus · June 2011

[quote name='khad' timestamp='1307697147' post='28858']

Thanks for the vote, Schlaefer! We are working on a great solution to HTTP Auth prompt support not being offered in browsers' native extension APIs. I don't have anything to announce right now, but this is definitely on our radar. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

[/quote]

Does that mean we'll get a solution for Chrome too?

[Deleted User] · June 2011

[quote name='Examinus' timestamp='1309090492' post='30407']

Does that mean we'll get a solution for Chrome too?

[/quote]

Hello Examinus,

I do not have any inside information regarding the potential HTTP Auth solution Khad refers to in his post, but he does mention [i]browsers'[/i] (plural). That is[b] not[/b] a hint, I promise...but it gives me hope! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />

Stefan Schmidt · June 2011

[quote name='bswins' timestamp='1309037569' post='30360']

I merged your topic with the appropriate thread.

[/quote]

Ah i must have overlooked that topic.

Thank you for the warm welcome, and hooray for agilebits already being aware of the issue.

1password has really become the most important piece of software i bought so far safe _maybe_ osx. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />

[Deleted User] · June 2011

Hello Stefan!

Thanks for responding! I'm on the Forums every day, and I still overlook similar topics! There is a lot to read through, and the 4+ letters search parameter does not make it easy. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />

We are aware of this issue, and many others, primarily due to members like you who take the time to post them. You never know when you'll be the first to mention something new. Usually, it's the one behavior that you're sure has been discussed before.

However, never let that thought stop you. If it has been brought up, we'll just merge the topic. At the very least, your post will be proof that the OP is not the only one to experience it.

I'm very happy to hear that 1Password has become the most important application you've bought [b][i]so far[/i][/b][b][i]...maybe.[/i][/b] I hope we stay at the top of your list for years to come! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />

Cheers!

Brandt

Daenney · June 2011

I was wondering if you could elaborate on what causes this?

If my memory serves me correctly HTTP Auth worked in 5.0 and it would seem rather strange for something in the extensions API to change so drastically from 5.0 to 5.1 that it would break this.

MikeT · June 2011

[quote name='Daenney' timestamp='1309349659' post='30670']

I was wondering if you could elaborate on what causes this?

If my memory serves me correctly HTTP Auth worked in 5.0 and it would seem rather strange for something in the extensions API to change so drastically from 5.0 to 5.1 that it would break this.

[/quote]HI Daenney,

Our extension for Safari 5 and previous versions were not native extensions, we interfaced with Safari in a different way.. The official extension APIs were only introduced to Safari 5 and our extension for Safari 5 were the same ones from before that, we didn’t use the APIs. In addition to that, it allowed us to work with the HTTP Auth prompts.

Starting with Safari 5.1, we’re using the native extension APIs provided by the browsers. This allow us to respect the sandbox technologies within the browsers and ensure that all native extensions play nicely and securely with each other and it won’t likely break by a new browser update.

Gilles9 · June 2011

[quote name='MikeT' timestamp='1309406930' post='30719']

HI Daenney,

Our extension for Safari 5 and previous versions were not native extensions, we interfaced with Safari in a different way.. The official extension APIs were only introduced to Safari 5 and our extension for Safari 5 were the same ones from before that, we didn’t use the APIs. In addition to that, it allowed us to work with the HTTP Auth prompts.

Starting with Safari 5.1, we’re using the native extension APIs provided by the browsers. This allow us to respect the sandbox technologies within the browsers and ensure that all native extensions play nicely and securely with each other and it won’t likely break by a new browser update.

[/quote]

Hello,

so will it support HTTP auth prompts ?

simply asked

Thanks

MikeT · June 2011

[quote name='Gilles9' timestamp='1309423166' post='30736']

Hello,

so will it support HTTP auth prompts ?

simply asked

Thanks

[/quote]Hi Giles9,

Not at the moment but we do plan to support it later on.

As Khad mentioned, majority of the browsers like Chrome and Safari does not have a way for us to support the HTTP auth prompts via their APIs. They do plan to support it later on but they don’t have a timeframe on when. We’re working on something else to help ease with the lack of support but we do not have a timeframe either on when it’ll be done. The best workaround is to copy and paste between 1Password and the browser for now.

UlfW · July 2011

After installing both OSX Lion (GM), and 1Password 3.6.1 I realized that the htaccess login fill button is gone.

Will I get that back or is it not possible anymore?

//edit: I have to look closer at the topics <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

http://forum.agile.ws/index.php?/topic/4956-http-authentication-not-yet-supported-in-safari-51/

[Deleted User] · July 2011

Hello UlfW!

I merged your topic with the appropriate Forum...but, you found that out on your own!

Please let us know if you have any additional questions.

Cheers!

Brandt

danlane · July 2011

Hi,

When using Safari 5.1 under Lion and 1Password 3.6.1 (build 31057) there is no 1Password functionality for Safari's HTTP basic authentication prompts.

I haven't seen this issue mentioned anywhere else so I don't know if it's a known issue or if it's just affecting me but this is a critical feature of 1password as far as I'm concerned and it would be a shame to see it go. I know this feature is missing from the Chrome plugin as well which always stopped me switching browsers to that.

brenty · July 2011

[quote name='danlane' timestamp='1310695225' post='32028']

Hi,

When using Safari 5.1 under Lion and 1Password 3.6.1 (build 31057) there is no 1Password functionality for Safari's HTTP basic authentication prompts.

I haven't seen this issue mentioned anywhere else so I don't know if it's a known issue or if it's just affecting me but this is a critical feature of 1password as far as I'm concerned and it would be a shame to see it go. I know this feature is missing from the Chrome plugin as well which always stopped me switching browsers to that.

[/quote]

Hey there, danlane! Welcome to the forums!

[url="http://help.agilebits.com/1Password3/http_auth.html"]This is indeed a "known issue"[/url], in that the Safari extension API -- [url="http://help.agilebits.com/1Password3/google_chrome_details.html#http_authentication_prompts"]likewise with Chrome[/url] -- does not allow for interacting with HTTP Auth prompts. If they allow this in the future, we would love to get this working; but for now this is simply not possible.

I am sorry I don't have a better answer for you, but we are working a solution.

diitto · July 2011

I am slowly beginning to learn this new 1Password extension for Safari... One big problem I have encountered is that I have several security cameras I routinely log in to... Prior to this recent extension upgrade, when I would log into those cameras, the webpage would open a secondary popup window that would ask for username and password... I would find a "1P" button to the right side of that popup window... Assuming I had logged on to 1 Password, I could just click that button and it would enter the information and log me on... Now, that's gone...

I use the 1Password extension in Safari to choose the camera page to start... After the camera page opens up, the username/password window pops up next and now I have no way to get 1Password to enter the username and password... I have no option but to type those in manually which renders 1Password useless on these camera webpages...

Again, to summarize, a "1P" button used to exist on those camera page login popup windows... Now, it's gone... Why??? And what method short of entering the information manually does 1Password offer for webpages with popup login windows like this????

thanks... bob...

brenty · July 2011

Hey there, diitto!

I am sorry for the trouble. At this time, [url="http://help.agilebits.com/1Password3/http_auth.html"]it is not possible for us to access HTTP Auth prompts[/url] as you describe using the Safari extension framework. We would love to implement this, but we can only hope that Apple updates the API to allow this in the future.

I am sorry I do not have a better answer for you. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />

[quote name='diitto' timestamp='1311313333' post='32860']

I am slowly beginning to learn this new 1Password extension for Safari... One big problem I have encountered is that I have several security cameras I routinely log in to... Prior to this recent extension upgrade, when I would log into those cameras, the webpage would open a secondary popup window that would ask for username and password... I would find a "1P" button to the right side of that popup window... Assuming I had logged on to 1 Password, I could just click that button and it would enter the information and log me on... Now, that's gone...

I use the 1Password extension in Safari to choose the camera page to start... After the camera page opens up, the username/password window pops up next and now I have no way to get 1Password to enter the username and password... I have no option but to type those in manually which renders 1Password useless on these camera webpages...

Again, to summarize, a "1P" button used to exist on those camera page login popup windows... Now, it's gone... Why??? And what method short of entering the information manually does 1Password offer for webpages with popup login windows like this????

thanks... bob...

[/quote]

diitto · July 2011

[quote name='brenty' timestamp='1311313788' post='32862']

Hey there, diitto!

I am sorry for the trouble. At this time, [url="http://help.agilebits.com/1Password3/http_auth.html"]it is not possible for us to access HTTP Auth prompts[/url] as you describe using the Safari extension framework. We would love to implement this, but we can only hope that Apple updates the API to allow this in the future.

I am sorry I do not have a better answer for you. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/sad.gif' class='bbc_emoticon' alt=':(' />

[/quote]

Just so I understand, did this happen as a result of Apple updating Safari to version 5.1??? Because prior to a few days ago, when this HTTP Auth prompt would open for my camera pages, there would be a "1P" button right on that little window... I would push that and, assuming I had previously logged on to 1Password with my Master Password, clicking that button would submit the login for me... Now, i see no option at all but for me to reenter the username and password manually... Which of course I can do but that's sort of the entire point of 1Password...

So again, I'm just curious to learn what has happened... I am assuming it is because of what Apple did recently with Safari??? Yes??? Would I have any better luck with Firefox??? I use Safari because it makes more reliable PDF's of pages and I do that all the time... But I wouldn't be opposed to using Firefox to access these camera pages... Maybe I will swing over to Firefox and see what I see... Your thoughts???

thanks for the help... bob...

diitto · July 2011

[quote name='diitto' timestamp='1311342842' post='32975']

Just so I understand, did this happen as a result of Apple updating Safari to version 5.1??? Because prior to a few days ago, when this HTTP Auth prompt would open for my camera pages, there would be a "1P" button right on that little window... I would push that and, assuming I had previously logged on to 1Password with my Master Password, clicking that button would submit the login for me... Now, i see no option at all but for me to reenter the username and password manually... Which of course I can do but that's sort of the entire point of 1Password...

So again, I'm just curious to learn what has happened... I am assuming it is because of what Apple did recently with Safari??? Yes??? Would I have any better luck with Firefox??? I use Safari because it makes more reliable PDF's of pages and I do that all the time... But I wouldn't be opposed to using Firefox to access these camera pages... Maybe I will swing over to Firefox and see what I see... Your thoughts???

thanks for the help... bob...

[/quote]

Well, maybe I just answered my own question... I just roamed over to Firefox... First I had to go into 1Password and install the Firefox extension... Not sure why I had to do that unless when you guys recently updated 1Password we needed to reinstall the extension on all browsers??? But anyway, once I did that and tried to launch one of my camera pages, on the HTTP Auth window that opens, there is the familiar "1P" button... I push it, select the specific camera login I want (It only shows one, the one I am on) and boom, I'm in, just like before...

So all that doesn't work now on Safari must be due to Safari's recent update as bundled with OS X Lion???

Bottom line is I can just use Firefox for camera logins at least for a while... Now let's hope we don't lose that in Firefox as well... thanks... bob...

khad · July 2011

[quote]So all that doesn't work now on Safari must be due to Safari's recent update as bundled with OS X Lion??? [/quote]

Correct. Access to the HTTP auth prompts is not available to extensions using Safari's native APIs. We are now doing this since Apple has has removed Scripting Additions going forward (the method we used to use). You can copy and paste your information from the main 1Password application, but we cannot currently provide this functionality in Safari.

I hope that helps. If we can be of further assistance, please let us know.

We are always here to help!

MacBest · July 2011

Hi there,

I've read a lot about 1Password, Safari and Lion here, but I didn't found a solution for this little problem here.

On all sites, where the login and password fields are not directly in the html but in a "popup window" I can't use 1Password at all.

It works fine with Firefox and 1 Password on the same site an same Mac. I've attached two screenshot, where you can see,

that the "1P" Icon is missing in Safari on this PopUps.

Im using:

Mac OS X Lion 10.7 (11A511)

Safari Version 5.1 (7534.48.3)

Firefox 5.0.1

1Password Extension 3.6.5.Beta-30

Any help welcome

[img]http://www.brändle.net/media/Safari.png[/img]

[img]http://www.brändle.net/media/Firefox.png[/img]

Greetings from Germany

Jürgen

khad · July 2011

Hi Jürgen!

Thanks for asking about this. [url="http://help.agilebits.com/1Password3/http_auth.html"]This is a known limitation in Safari[/url]. We are working on a solution to get around the limitation imposed by Apple, but I don't know when or if this will be possible.

I'm sorry I don't have a better answer for you at this time, but please let me know if there is anything else I can help with.

Thanks!

MacBest · July 2011

[quote name='khad' timestamp='1311664543' post='34060']

Hi Jürgen!

Thanks for asking about this. [url="http://help.agilebits.com/1Password3/http_auth.html"]This is a known limitation in Safari[/url]. We are working on a solution to get around the limitation imposed by Apple, but I don't know when or if this will be possible.

I'm sorry I don't have a better answer for you at this time, but please let me know if there is anything else I can help with.

Thanks!

[/quote]

Hi there,

thanks for your answer. But if you can't get a solution for this 1Password on Lion will be nearly useless for me.

There are a lot of apache web server that use this feature.

Hope you find a solution. Till 10.6.8 I recommended 1Password to all of my friends but now I can't do this anymore <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_sadsmile.png' class='bbc_emoticon' alt=':-(' />

Jürgen

khad · July 2011

Sorry, Jürgen. Apple does not provide access to HTTP auth prompts in the Safari extension APIs. We are working on getting around this limitation — nothing is impossible for our developers — but I don't have any kind of time frame I can give you. For now I am just saving my HTTP auth credentials in the OS X keychain since there are only a couple sites where I need this.

Just check the box to "Remember this password in my keychain". It won't be available browsers apart from Chrome, but it is working for me until we can either convince Apple to make this available in their APIs or release our own magical solution.

MacBest · July 2011

Thanks again,

hope that you find the magical solution soon.

I don't think Apple will provide a solution in the near future.

I'll try the OSX keychain stuff so far. (was happy that I didn't needed it with 1P)

Jürgen

khad · July 2011

[quote] (was happy that I didn't needed it with 1P)[/quote]

Me too. This is just to tide us over for the moment. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/skype_wink.png' class='bbc_emoticon' alt=';-)' />

Thanks for your patience and support!

HTTP Basic Authentication not supported in Safari 5.1

Comments