Hello - I am testing SparkBox and I noticed when I do log out of the dashboard the log in page retained my password. At first I thought this was just my Mac but it also happening on my Windows.
6 replies
tomspark wrote:
You're right, and thanks for pushing back — I dug into it and this one is on us, not your browser. When you hit log out, the dashboard flips back to the login screen without wiping what you typed in the password box, so it's still sitting there. You are genuinely logged out behind the scenes, but on a shared computer someone could still press the button and get back in, so this is a real bug and the fix is already on the list. Until it ships, refresh the page (F5, or Cmd-R on the Mac) right after logging out and the box clears. Nothing to check on your end — you found a legit one, thank you!
Chris wrote:
Circling back, because you were owed an answer here and never got one. You were right, and the workaround has expired in the best way: Tom shipped the fix on 12 July, so the login form now clears the password box when you log out. No more pressing F5 afterwards. It comes in with a release update. Over SSH: sudo sparkbox upgrade That is upgrade rather than update — update only refreshes your apps' images and cannot move you onto a newer release. Thanks for pushing back on my first answer. That is the only reason this one got found.
tomspark wrote:
Good news — you didn't find a leak, and logging out really does log you out. What you're seeing is your browser's own save-password feature: when you first signed in, the browser (not SparkBox) offered to remember the password, and now it fills it back in on the login page. That's why it happens on both your Mac and Windows — each browser saved it. SparkBox never puts your password back in the page itself. If you'd rather it not appear, delete the entry in your browser's saved-passwords settings and pick never when it offers again. Thanks for testing and reporting!
Leo20 wrote:
No - I made sure to select Do Not Remember for this Website and the password is still holding for me after doing log out. I will check on a different browser later today.
Leo20 wrote:
Glad to hear it was not just me pulling an ID: 10T
Leo20 wrote:
Thank you for all your help! I did notice the password began to clear a couple updates ago and glad it was resolved quick. Thank you!