Improve basic auth in browser extension

[gean]

Hey there,
currently Bitwarden only supports basic auth when there is only one matching credential present:
Basic Auth Prompts | Bitwarden Help Center (/help/basic-auth-autofill)

The current implementation doesn’t work for me, since i have many pages that are using basic auth and a regular login form.

In my opinion, the best solution would be to show a popup and let the user select the credentials that should be used - in the case that there are multiple matches.

Contrary to the post in the github issue #1124 it is possible and not related to a desktop app.

See: Kee/KeePass - src/background/NetworkAuth.ts

[gean]

Since this isn’t getting much attention and takes more time to implement, maybe something like a checkbox (see example.png) would be possible to add?

[grb]

In the meantime, you might want to try one of the tow work-arounds suggested here:

Fill Basic Auth Prompts (htaccess passwords)

OK, I have two work-around suggestions for you: Approach 1 Keep the two sets of credentials in separate login items, but set the URI match detection for the back end login to “Never” (or simply delete the URI). To autofill the back end, search for the corresponding vault item (you may want to tailor the item name or use other SEO tricks to make it easier to search for), then open it and click the “Autofill” option from there (in the redesigned browser extension you will be able to autofill di…

[gean]

Thanks, Approach 2 is a bit cumbersome but works for a few sites.

The problem is, that doesn’t work in situations where you have multiple credentials for one site (but only one set basic-credentials).

Example for one site:
basic auth: foo:bar
Login 1: user1
Login 2: user2
…

It also is a bit concerning, that the credentials get automatically sent without asking the user.

[grb]

@gean

It also is a bit concerning, that the credentials get automatically sent without asking the user.

This is the way that Basic Auth autofill normally works. If there is one and only one login item with a matching URL, then the username/password will be automatically submitted.