Skip to content

Setting a UI password results in unexpected authentication prompting #2829

Description

@randyleiker

FPP 10.0 master 1229-gba2656df8 (upgraded from 10.0 Beta 3) on a K128D-B cape with a Beagle Bone Black

Describe the bug and Steps to reproduce:

  1. On an existing FPP install with no UI password, and no OS password set, in Firefox 153.0.4, navigate in the FPP web UI to Status/Control > FPP Settings, and select the UI tab.
  2. Set the "UI Password" field to "enter a password".
  3. The hard coded "admin" user name appears, along with two password fields as expected.
  4. Enter the desired password in the first password field, along with confirming it in the second password field.
  5. FPP prompts the web browser to immediately display an HTTP basic auth pop-up authentication box.
  6. Enter "admin" as the user name and the same password entered in step # 4 above.
  7. Authentication fails and the HTTP basic auth pop-up box re-appears.

Expected behavior:
The only means available to get the HTTP basic auth pop-up box to accept the login credentials is to enter the default user name/password of "admin"/"falcon" first, at which point it then prompts a second time with the same HTTP basic auth pop-up box where "admin" and the user's desired password entered in step # 4 above is then accepted.

For FPP users who do not know the default UI password, or do not realize the default user/password needs to be entered first, followed by immediately authenticating again as admin and the user's desired password will find this very confusing. This should be re-worked so that when the user is first prompted to authenticate, it should accept "admin" and the user's desired password.

I did not readily have the means to test if this same confusing authentication sequence occurs when setting the UI password from the initial setup page that appears when FPP first boots after flashing an SD card.

Additionally on the Status/Control > FPP Settings > System tab, when setting an OS password, it does not display the hard coded user name. This should be added so that it's consistent with the behavior of setting the UI password.

Metadata

Metadata

Assignees

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions