keepassxc-browser icon indicating copy to clipboard operation
keepassxc-browser copied to clipboard

Published 20 hours ago • verified publisher icon keepassxreboot

Passkeys breaks online.adp.com

Open wgiddens opened this issue 8 months ago • 17 comments

When passkeys are enabled, the ADP workforce site never loads in Chrome. Firefox seems to handle it fine. If you disable passkey in the extension settings it will work.

From the console logs, it appears that some of the ADP javascript is being blocked by the Keepassxc extension.

(anonymous) @ 6a8f894227f41759348779077d1e5851.js:1
(anonymous) @ 6a8f894227f41759348779077d1e5851.js:1
6a8f894227f41759348779077d1e5851.js:1 [Violation] Parser was blocked due to document.write(<script>)
(anonymous) @ 6a8f894227f41759348779077d1e5851.js:1
(anonymous) @ 6a8f894227f41759348779077d1e5851.js:1
6a8f894227f41759348779077d1e5851.js:1 [Violation] Parser was blocked due to document.write(<script>)
(anonymous) @ 6a8f894227f41759348779077d1e5851.js:1
(anonymous) @ 6a8f894227f41759348779077d1e5851.js:1
6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1 Error
v1/:1 Denying load of chrome-extension://oboonakemofpalcgghocfoadofidjkkk/data/keys.json. Resources must be listed in the web_accessible_resources manifest key in order to be loaded by pages outside the extension.Understand this errorAI
v1/:1 Denying load of chrome-extension://oboonakemofpalcgghocfoadofidjkkk/synerg-web-components/synerg-web-components-5.20.0.esm.js. Resources must be listed in the web_accessible_resources manifest key in order to be loaded by pages outside the extension.Understand this errorAI
6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1 
            
            
           GET chrome-extension://invalid/ net::ERR_BLOCKED_BY_CLIENT
sA @ 6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1
sC @ 6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1
sR @ 6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1
fetch @ 6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1
Ll.dtAWF @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:260
va.fetch @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:291
Ga @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:291
(anonymous) @ synerg-config-5.20.0.js:1
(anonymous) @ synerg-config-5.20.0.js:1
s @ synerg-config-5.20.0.js:1
t.initializeKeys @ synerg-config-5.20.0.js:1
(anonymous) @ synerg-config-5.20.0.js:1
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ load-synergy.js:25
(anonymous) @ switchMap.js:16
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ filter.js:7
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ observeOn.js:11
(anonymous) @ executeSchedule.js:9
t._execute @ AsyncAction.js:67
t.execute @ QueueAction.js:24
t.flush @ AsyncScheduler.js:23
t.schedule @ QueueAction.js:20
e.schedule @ Scheduler.js:14
r @ executeSchedule.js:8
(anonymous) @ observeOn.js:10
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ Subject.js:41
i @ errorContext.js:23
t.next @ Subject.js:31
(anonymous) @ createEpicMiddleware.js:49
(anonymous) @ index.js:19
(anonymous) @ middleware.js:35
539 @ index.js:52
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
282 @ logo-adp-fy19.svg:1
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
i @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
e @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
Na @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:366
(anonymous) @ main.376f50c1.chunk.js:1Understand this errorAI
synerg-config-5.20.0.js:1 Error loading license keys TypeError: Failed to fetch
    at sA (6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1:114328)
    at sC (6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1:93097)
    at sR (6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1:330441)
    at fetch (6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1:330321)
    at Ll.dtAWF [as aWF] (ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:260:226)
    at va.fetch (ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:291:367)
    at Ga (ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:291:111)
    at synerg-config-5.20.0.js:1:20521
    at Generator.next (<anonymous>)
    at synerg-config-5.20.0.js:1:20362
(anonymous) @ synerg-config-5.20.0.js:1
l @ synerg-config-5.20.0.js:1
Ll.dtAWF @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:260
va.onRejected @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:292
Ea.<computed> @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:289
Promise.then
Ll.dtAWF @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:260
va.then @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:291
aa.then @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:289
a @ synerg-config-5.20.0.js:1
(anonymous) @ synerg-config-5.20.0.js:1
s @ synerg-config-5.20.0.js:1
t.initializeKeys @ synerg-config-5.20.0.js:1
(anonymous) @ synerg-config-5.20.0.js:1
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ load-synergy.js:25
(anonymous) @ switchMap.js:16
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ filter.js:7
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ observeOn.js:11
(anonymous) @ executeSchedule.js:9
t._execute @ AsyncAction.js:67
t.execute @ QueueAction.js:24
t.flush @ AsyncScheduler.js:23
t.schedule @ QueueAction.js:20
e.schedule @ Scheduler.js:14
r @ executeSchedule.js:8
(anonymous) @ observeOn.js:10
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ Subject.js:41
i @ errorContext.js:23
t.next @ Subject.js:31
(anonymous) @ createEpicMiddleware.js:49
(anonymous) @ index.js:19
(anonymous) @ middleware.js:35
539 @ index.js:52
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
282 @ logo-adp-fy19.svg:1
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
i @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
e @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
Na @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:366
(anonymous) @ main.376f50c1.chunk.js:1Understand this errorAI
synerg-config-5.20.0.js:1 
            
            
           GET chrome-extension://invalid/ net::ERR_BLOCKED_BY_CLIENT
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ synerg-config-5.20.0.js:1
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ load-synergy.js:25
(anonymous) @ switchMap.js:16
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ filter.js:7
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ observeOn.js:11
(anonymous) @ executeSchedule.js:9
t._execute @ AsyncAction.js:67
t.execute @ QueueAction.js:24
t.flush @ AsyncScheduler.js:23
t.schedule @ QueueAction.js:20
e.schedule @ Scheduler.js:14
r @ executeSchedule.js:8
(anonymous) @ observeOn.js:10
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ Subject.js:41
i @ errorContext.js:23
t.next @ Subject.js:31
(anonymous) @ createEpicMiddleware.js:49
(anonymous) @ index.js:19
(anonymous) @ middleware.js:35
539 @ index.js:52
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
282 @ logo-adp-fy19.svg:1
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
i @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
e @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
Na @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:366
(anonymous) @ main.376f50c1.chunk.js:1Understand this errorAI
synerg-config-5.20.0.js:1 Initialization failed: Event {isTrusted: true, type: 'error', target: script, currentTarget: script, eventPhase: 2, …}
(anonymous) @ synerg-config-5.20.0.js:1
Promise.catch
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ load-synergy.js:25
(anonymous) @ switchMap.js:16
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ filter.js:7
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ observeOn.js:11
(anonymous) @ executeSchedule.js:9
t._execute @ AsyncAction.js:67
t.execute @ QueueAction.js:24
t.flush @ AsyncScheduler.js:23
t.schedule @ QueueAction.js:20
e.schedule @ Scheduler.js:14
r @ executeSchedule.js:8
(anonymous) @ observeOn.js:10
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ Subject.js:41
i @ errorContext.js:23
t.next @ Subject.js:31
(anonymous) @ createEpicMiddleware.js:49
(anonymous) @ index.js:19
(anonymous) @ middleware.js:35
539 @ index.js:52
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
282 @ logo-adp-fy19.svg:1
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
i @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
e @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
Na @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:366
(anonymous) @ main.376f50c1.chunk.js:1Understand this errorAI
v1/:1 Uncaught (in promise) Event {isTrusted: true, type: 'error', target: script, currentTarget: null, eventPhase: 0, …}
Promise.then
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ synerg-config-5.20.0.js:1
initialize @ synerg-config-5.20.0.js:1
(anonymous) @ load-synergy.js:25
(anonymous) @ switchMap.js:16
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ filter.js:7
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ observeOn.js:11
(anonymous) @ executeSchedule.js:9
t._execute @ AsyncAction.js:67
t.execute @ QueueAction.js:24
t.flush @ AsyncScheduler.js:23
t.schedule @ QueueAction.js:20
e.schedule @ Scheduler.js:14
r @ executeSchedule.js:8
(anonymous) @ observeOn.js:10
u._next @ OperatorSubscriber.js:14
t.next @ Subscriber.js:32
(anonymous) @ Subject.js:41
i @ errorContext.js:23
t.next @ Subject.js:31
(anonymous) @ createEpicMiddleware.js:49
(anonymous) @ index.js:19
(anonymous) @ middleware.js:35
539 @ index.js:52
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
282 @ logo-adp-fy19.svg:1
oa @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:365
l @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
i @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
e @ v1/?APPID=WFNPortal&productId=80e309c3-7085-bae1-e053-3505430b5495&returnURL=https://workforcenow.adp.com/&callingAppId=WFN&TARGET=-SM-https://workforcenow.adp.com/theme/index.html:46
Na @ ruxitagentjs_ICA7NVfghqrux_10293240704151944.js:366
(anonymous) @ main.376f50c1.chunk.js:1Understand this errorAI
6a8f894227f41759348779077d1e5851.js?cache=AID8ybiVAQAASXxSZB_FRbw5aUpldux3iHwUYe805GkhODP_BfgSDxy4p3hy&X-zuY25QsG--z=q:1 Canvas2D: Multiple readback operations using getImageData are faster with the willReadFrequently attribute set to true. See: https://html.spec.whatwg.org/multipage/canvas.html#concept-canvas-will-read-frequently

wgiddens avatar Mar 21 '25 13:03 wgiddens

This is quite hard to debug without an account. The most interesting lines were at the beginning:

v1/:1 Denying load of chrome-extension://oboonakemofpalcgghocfoadofidjkkk/data/keys.json. Resources must be listed in the web_accessible_resources manifest key in order to be loaded by pages outside the extension.Understand this errorAI
v1/:1 Denying load of chrome-extension://oboonakemofpalcgghocfoadofidjkkk/synerg-web-components/synerg-web-components-5.20.0.esm.js. Resources must be listed in the web_accessible_resources manifest key in order to be loaded by pages outside the extension.Understand this errorAI

The extension does not have those files. I wonder if some script is trying to do this. This issue might be related: https://github.com/keepassxreboot/keepassxc-browser/issues/2475

varjolintu avatar Mar 21 '25 13:03 varjolintu

It definitely seems related to #2475. I dug through the adp js and found where they are using document.scripts[document.scripts.length - 1] to dynamically load a script based on the last tag.

wgiddens avatar Mar 21 '25 15:03 wgiddens

Firefox seems to handle it fine.

I realized I already had passkeys disabled in Firefox but not Chrome. Enabling passkeys there breaks Firefox too.

wgiddens avatar Mar 21 '25 15:03 wgiddens

It definitely seems related to #2475. I dug through the adp js and found where they are using document.scripts[document.scripts.length - 1] to dynamically load a script based on the last tag.

This is such bad web page design. There can be multiple browser extension that use injected scripts, and that kind of selection definitely breaks the page.

varjolintu avatar Mar 21 '25 15:03 varjolintu

If you have any way to contact their webmaster, I'd recommend doing it. I couldn't find any relevant information on their web page when not logged in.

varjolintu avatar Mar 23 '25 05:03 varjolintu

I have been suffering the same problem on an online banking website. Given that it's for banking I don't really want to post log details, but the symptoms seem to match most of what I've been reading here about sites breaking when Passkeys are enabled but okay when disabled. Simply telling KeypassXC-Browser to disable all features does not fix the problem, you actually have to disable the Passkeys option. Given that situation, it seems we need an Site preferences option to disable Passkey injection for particular domains. For now, at least I know how to get my online banking done, just turn off Passkeys while I'm doing it.

Note: the chances of the bank listening to a request to fix their site for a feature they don't use (they currently don't support passkeys at all) are slim to none.

g-tc avatar Mar 27 '25 14:03 g-tc

I think the "disable all features" should of course also disable passkeys as well. So that's something I need to check and fix.

varjolintu avatar Mar 27 '25 15:03 varjolintu

https://github.com/keepassxreboot/keepassxc-browser/pull/2500 This change fixes the site ignore setting.

varjolintu avatar Mar 28 '25 18:03 varjolintu

since kpxc browser uses mv3 already, is it possible to use content script with MAIN world instead of injected script tag, which can mess up the page's expected DOM? it seems to need firefox 128, for legacy versions we can use exportFunction/cloneInto?

alxu-avpt avatar Apr 07 '25 16:04 alxu-avpt

since kpxc browser uses mv3 already, is it possible to use content script with MAIN world instead of injected script tag, which can mess up the page's expected DOM? it seems to need firefox 128, for legacy versions we can use exportFunction/cloneInto?

What feature do you mean? Any details? Firefox is still in MV2 though.

varjolintu avatar Apr 07 '25 16:04 varjolintu

since kpxc browser uses mv3 already, is it possible to use content script with MAIN world instead of injected script tag, which can mess up the page's expected DOM? it seems to need firefox 128, for legacy versions we can use exportFunction/cloneInto?

What feature do you mean? Any details? Firefox is still in MV2 though.

https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts#world https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Sharing_objects_with_page_scripts

alxu-avpt avatar Apr 07 '25 18:04 alxu-avpt

since kpxc browser uses mv3 already, is it possible to use content script with MAIN world instead of injected script tag, which can mess up the page's expected DOM? it seems to need firefox 128, for legacy versions we can use exportFunction/cloneInto?

What feature do you mean? Any details? Firefox is still in MV2 though.

https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts#world https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Sharing_objects_with_page_scripts

Not sure if those are gonna help, but I can try. If the script is accessible by the page in the normal document.scripts space, hiding it from there probably also hides it from the WebAuthN API.

varjolintu avatar Apr 07 '25 19:04 varjolintu

This seems to happen on one of the products that we run. Is the fix only possible from their side or are we stuck with having to disable passkey to access the page until the exclusion discussed above is implemented? Or is something else being looked at?

pbulteel avatar Apr 24 '25 10:04 pbulteel

@pbulteel I haven't looked any solutions yet. One site reported that they have fixed the issue on their end. Not even sure if the solution proposed above would help.

varjolintu avatar Apr 24 '25 10:04 varjolintu

online.adp.com still has the issue. It seems that "disable all features" also disables autofill. Is there any chance to add an option like "disable passkey" only?

raidenii avatar May 20 '25 01:05 raidenii

@raidenii There's no such option yet.

varjolintu avatar May 20 '25 03:05 varjolintu

online.adp.com still has the issue. It seems that "disable all features" also disables autofill. Is there any chance to add an option like "disable passkey" only?

I found the same issue :( It was causing ADP to fail to load and result with WSOD in Firefox, so I had to choose between completely disabling passkeys or disabling all features for online.adp.com which kills the autofill as well.

vbojan avatar May 25 '25 17:05 vbojan

Also found the same issue/problem with the Unit4 ERP webb program (https://www.unit4.com/products/erp-accounting-software), but in my case it is behind my workplace SSO :(

agreedSkiing avatar Jul 18 '25 06:07 agreedSkiing

Same issue found on https://github.com/keepassxreboot/keepassxc-browser/issues/2626 (on a public page so maybe easier to reproduce). Thanks @varjolintu for digging into it. The only workaround/suggestion I could ask for is have a site-specific option to disable passkey support per site. So you can ignore that site while keeping the password support.

rugk avatar Aug 06 '25 15:08 rugk

The support for that ignore setting is already on my roadmap.

varjolintu avatar Aug 06 '25 15:08 varjolintu

v1.9.9.3 broke this completely. Not just that ADP doesn't get detected at all anymore, but even other websites which used to work just fine are now broken. For example, https://login.personifyhealth.com is not populating password anymore in the 2nd step.

vbojan avatar Aug 31 '25 08:08 vbojan

v1.9.9.3 broke this completely. Not just that ADP doesn't get detected at all anymore, but even other websites which used to work just fine are now broken. For example, https://login.personifyhealth.com is not populating password anymore in the 2nd step.

With 1.9.9.4 ADP site works normally when passkeys are disabled. The other site you linked works if the password is filled manually. Sadly the clickjacking preventions broke some sites, and we'll have to find another way to get along with them. Custom Login Fields bypassed the checks though.

varjolintu avatar Aug 31 '25 08:08 varjolintu

One solution to this problem would be to revert https://github.com/keepassxreboot/keepassxc-browser/pull/2432 but that breaks passkeys from multiple sites.

varjolintu avatar Aug 31 '25 10:08 varjolintu

v1.9.9.3 broke this completely. Not just that ADP doesn't get detected at all anymore, but even other websites which used to work just fine are now broken. For example, https://login.personifyhealth.com is not populating password anymore in the 2nd step.

With 1.9.9.4 ADP site works normally when passkeys are disabled. The other site you linked works if the password is filled manually. Sadly the clickjacking preventions broke some sites, and we'll have to find another way to get along with them. Custom Login Fields bypassed the checks though.

Firefox is still reporting 1.9.9.3 as the most recent version :(

vbojan avatar Aug 31 '25 18:08 vbojan

One solution to this problem would be to revert #2432 but that breaks passkeys from multiple sites.

Disabling support for passkeys in 1.9.9.4 using that option might suffice for those that don't support passkeys or users don't use them.

vbojan avatar Aug 31 '25 18:08 vbojan

v1.9.9.3 broke this completely. Not just that ADP doesn't get detected at all anymore, but even other websites which used to work just fine are now broken. For example, https://login.personifyhealth.com is not populating password anymore in the 2nd step.

With 1.9.9.4 ADP site works normally when passkeys are disabled. The other site you linked works if the password is filled manually. Sadly the clickjacking preventions broke some sites, and we'll have to find another way to get along with them. Custom Login Fields bypassed the checks though.

It appears this is a broader issue and is affecting other websites that use multi-screen login like PayPal.

vbojan avatar Sep 03 '25 05:09 vbojan

I just ran into this today with ADP and Keepass

melloware avatar Nov 08 '25 17:11 melloware

I just ran into this today with ADP and Keepass

New extension now has option to Disable passkeys under Site Preferences which helps with ADP.

vbojan avatar Nov 08 '25 19:11 vbojan

@vbojan thank you that is a huge help.

melloware avatar Nov 08 '25 20:11 melloware