Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
BUG: Changing website password through extension doesn't work (/.well-known/change-password)
Hi guys, I noticed that changing a password through the browser extension doesn't work correctly. For example:
- you are logged in to twitter.com and have the browser page open on the twitter site...
Hi @Joy_1P, I did some testing on some servers and I found what is causing the issue on Twitter.
The 1password extension checks the url https://twitter.com/.well-known/change-password, but also checks: https://twitter.com/.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 (kudos for testing on an URL that explains what it is expecting)
The URL https://twitter.com/.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 generates a 200 OK
When the URL generates a 200, it doesn't work correctly and the user is bumped to the homepage. BUT if that URL would generate a 404 it does work correctly.
I also tested this at Github; https://github.com/.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 generates a 404 and thus the "change password" function of the extension works as expected.
Hope this helps! Not sure why you guys check /.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 but there is probably a very good reason to do so :-)
Hope this helps!
