News for hackers. Stuff that matters.
Re:Don’t Get Clever with Login Forms by 8ytecoder on Friday February 15, 2019 @11:47AM (#19172350)
Yeah, federated flows were my guess too. However, the password fields could have been present and hidden in the same page supporting both password managers and avoiding a page transition. And also the hundred other sites that don't need federated flows but think they need to copy this feature as well. Together it's annoying to hit password managers twice for every login.
Re:Don’t Get Clever with Login Forms by amaccuish on Friday February 15, 2019 @11:54AM (#19172438)
> However, the password fields could have been present and hidden in the same page supporting both password managers and avoiding a page transition

But then you run the risk of your password of being submitted to the wrong portal no?

> And also the hundred other sites that don't need federated flows but think they need to copy this feature as well

Very true. It seems to be becoming increasingly prevalent :(

Re:Don’t Get Clever with Login Forms by 8ytecoder on Friday February 15, 2019 @12:50PM (#19172998)
i) Hidden and ii) Nothing I enter should be submitted anyway in an SSO flow.
Re:Don’t Get Clever with Login Forms by blattimwind on Friday February 15, 2019 @01:24PM (#19173345)
Page 1: Email/account name, Page 2: Okay, here are some recatpchas, Page 3: Password. Mistyped it? Start back on Page 1 please.