Stuck password with 2.0.19993

RoiEX

I haven't looked into it so far, but it sure looks like this is a common issue, so definitely worth creating a github issue

Panther

@RoiEX https://github.com/triplea-game/triplea/issues/6806

RoiEX

So I did some digging and I have identified a potential error source.

@Jim-Parker Could you check .userPrefs/games/strategy/security/prefs.xml for me and check if that changes as well?
If it does this would already explain a lot, but not everything. If it doesn't I'll have to check elsewhere.
Do NOT post the contents of this file here, it contains the password used to encrypt the passwords. Also I redacted them in your previous post, just to feel a little bit safer.

Jim Parker

@RoiEX Nope. ./security/prefs.xml did not change.

Jim Parker

@RoiEX Thanks for fixing my naive post of passwords.

RoiEX

Ok, next set of questions:

.userPrefs/games/strategy/security/prefs.xml has a fixed property called DEFAULT_CREDENTIAL_MANAGER_MASTER_PASSWORD right? I just want to make sure it actually saves the key it encrypts the passwords with.

When you're just looking at your engine preferences: The username you configured along with the password. Does it change as well? Or is it the same username you entered in the first place?

If it does indeed change: When does it change? After closing and reopening the game/window/tab, something else?

RoiEX

@Jim-Parker

Thanks for fixing my naive post of passwords.

If that helps: I'm "currently working" (read as "I should finish this little project soon but haven't proceeded so far") on a small change to the system so we no longer store real passwords, just encrypted Login Tokens that can be revoked and re-created at any time.

I doubt that this planned change will fix the issue you're currently experiencing, but if all attempts to nail the problem down fail that would be an option as well.

Jim Parker

Yes. security/prefs.xml does have a property DEFAULT_CREDENTIAL_MANAGER_MASTER_PASSWORD.

If I open engine preferences, I see my username and -- a 10-character password!! However, whenever I open a game it loads my username and an 8-character password...
If I load a game, and then post and quit. I still see my username in the Engine preferences, and a 10-character password. HTH.

LaFayette

The 8 character password on the UI is a dummy value, the back-end still has your original password. The problem is that there is a case where the front-end sends the dummy password to the back-end which is only supposed to happen when you are actually typing a legitimate password. The backend then dutifully stores the dummy password value.

This update fixes the problem: https://github.com/triplea-game/triplea/pull/6864

Jim Parker

@LaFayette Yea!!! That works! Thank you.