Implement Well Known Password Change URL

This looks a very simple and overall good little spec:

https://wicg.github.io/change-password-url/index.html

I think we should implement this as soon as some Password Manager (KeePass, LastPass, 1Password) implements it too.

12 Likes

This was implemented by Twitter, GitHub and WordPress.

2 Likes

Sure if it is simple, did you want to take it for 2.3?

3 Likes

This is done.

https://github.com/discourse/discourse/commit/51a6acb2af810b3ee29d8a38a88892d008c5ae2f

If iCloud keychain detects that you are re-using a password, it will show a :warning: sign. Hovering on that will have a link to this well-known URL, which will redirect you to the user account preferences in Discourse now.

There is a bug in the Apple implementation where they aren’t using the full URL (they redirect to just discourse.org instead of meta.discourse.org) but I assume they working on that (I contacted one of their engineers on Twitter but no response so far.

7 Likes