Bug report #5959

WMS password visible

Added by Frank van Wijngaarden over 12 years ago. Updated over 12 years ago.

Status:Closed
Priority:Normal
Assignee:-
Category:Web Services clients/WMS
Affected QGIS version:1.8.0 Regression?:No
Operating System: Easy fix?:No
Pull Request or Patch supplied:No Resolution:
Crashes QGIS or corrupts data:No Copied to github as #:15379

Description

When using a WMS with basic authentication, the password is hidden while being entered.
But in at least two places later on is it fully visible, for everyone to see:
1) In the registry
2) When investigating the layer properties on the Algemeen / General tab


Related issues

Related to QGIS Application - Bug report #108: Password of postgis databases is visible in legend tooltip Closed
Related to QGIS Application - Feature request #4823: Add warning when saving PGsql/PostGIS passwords Closed 2012-01-16
Related to QGIS Application - Bug report #3862: world-readable postgresql account passwords in QGIS.conf Closed
Related to QGIS Application - Bug report #2146: PostGres connection exposes username and password Closed

Associated revisions

Revision 81abf7fb
Added by Jürgen Fischer over 12 years ago

add clear text password warning (fixes #5959)

History

#1 Updated by Alexander Bruy over 12 years ago

BTW, same for PostgreSQL and other DB connections

#2 Updated by Jürgen Fischer over 12 years ago

Alexander Bruy wrote:

BTW, same for PostgreSQL and other DB connections

Only if you opt to save the password - and acknowledge that it will be saved in clear text. The warning might be missing in the WMS case - but not giving a username/password should also trigger the credentials dialog, when the credentials are needed.

#3 Updated by Giovanni Manghi over 12 years ago

  • OS version deleted (XP)
  • Operating System deleted (Windows)

but not giving a username/password should also trigger the credentials dialog, when the credentials are needed.

yes it does. I just set a few wms/wfs/wcs services protected with basic http authentication and if credentials are not saved in the connection details qgis pop up a credentials dialog when connecting the server.

#4 Updated by Jürgen Fischer over 12 years ago

  • Status changed from Open to Closed

Also available in: Atom PDF