Hey guys,

 

just a suggestion, the login popup box was annoying me last few weeks, and thought i would bring it to attention. Is there any chance a separate login page or a modal (inline popup) can be implemented instead? If this already exists and im just blind, please let me know.

 

Couple of reasons for this:

 

1. The current popup based login system is disruptive. If you just have the tab running in the background and it gets re-loaded, it would jump to the front etc.

2. No way to remember the credentials. Browser wont remember them, nor will password managers (unless the login form is in a html form).

 

Also, another step forward would be to add sort of a "remember me" feature to not ask for my password again for few weeks.

 

Cheers

Which login page?    I do not get prompted when I login - my Windows system and my iPads all remember the login details.  Perhaps you are talking about logging in on the unRAID console with the console GUI option invoked?

Which login page?    I do not get prompted when I login - my Windows system and my iPads all remember the login details.  Perhaps you are talking about logging in on the unRAID console with the console GUI option invoked?

 

Well, i dont really know what you call it. But you know when you install unraid, then use a web browser on another machine to navigate to the unraid server? Where you do all the setup thing. On that UI, you can have a username/password. And this login is done with a simple browser popup. Im assuming this is what you said your browser/ipad remembers. But mine doesnt for some reason, and obviously password managers like lastpass (or all the other alternatives) definitely wont (because they need html elements to be able to populate).

On most modern browsers it is a user option as to whether they remember login details for web sites or ask every time.  I work on the assumption that on my home devices attached to my home network I do not mind the automated login for unRAID as if they are compromised then I have other more serious issues anyway..

On most modern browsers it is a user option as to whether they remember login details for web sites or ask every time.  I work on the assumption that on my home devices attached to my home network I do not mind the automated login for unRAID as if they are compromised then I have other more serious issues anyway..

 

Unless you are using a different version or something (im on 6.1.x), im actually quite confused. The dialog im talking about is the automatic authentication dialog that the browser spits out when it receives a 401. It looks something like this: https://sahipro.com/docs/assets/images/using-sahi/401/401-chrome.png (not an actual screenshot, i just gogoled to find one). If your login dialog does not look like this, then we are talking about different things. If your login dialog does look like this, and it remembers your login details, please share a screenshot as i would love to get to the bottom of this if it can be fixed with some setting.

 

Let me go a bit more technical:

 

As mentioned, this popup comes from browsers when it sees a 401 on the request. Since this is browser invoked (not page invoked), it sits outside the scope of javascript/page, therefore any browser plugins or code within the page does not have access to the said popup to fill the fields. When i say browser plugins, im referring to password managers such as lastpass/keypass or what ever people are using. I suppose an exception would be the password manager that ships with OSX, what ever it was called. However, the browser it self may or may not be able to remember, but in my case (using latest chrome in windows 10), my browser does not prompt nor remembers my logins, and even then, saving login details on the browser is a VERY BAD IDEA.

 

So, what im suggesting is to instead of returning a 401, create a login page, the redirect the user to the said login page where the login fields are simple html form (where the browser and the browser plugins can freely interact with). This also allows for additional functionality such as "remember me" (you would need to implement this on the backend too obviously).

That is exactly the dialog I am talking about.    When I get it using Internet Explorer there is also a checkbox to remember credentials.  I am not sure where you tell Chrome to remember credentials.  Because I accepted the option to save credentials I no longer see that dialog unless I use Windows Credentials Manager to remove the existing credentials.

That is exactly the dialog I am talking about.    When I get it using Internet Explorer there is also a checkbox to remember credentials.  I am not sure where you tell Chrome to remember credentials.  Because I accepted the option to save credentials I no longer see that dialog unless I use Windows Credentials Manager to remove the existing credentials.

Fair enough. So saving credentials aside (even if its possible on the browser level, i think i explained already about the security problems with saving on the browser, and its technically impossible on a browser plugin level), i still stand by my feature request, as it is something very good to have (not critical, but you know, features...).

 

@itimpi thanks for the clarification on the save credentials on the browser, ill dig into that further and make sure the domain isnt blocked from doing so (thats probably the reason, though as mentioned, i probably wont actually use that for security reasons).