Ranked search results

With a vault growing by the day and website updating their login domains, searching can be very helpful! Today a release that makes use of https://github.com/kentcdodds/match-sorter to sort the search results based on their rank :)

OTP/2FA token support

There are a number of password managers that can generate 2FA tokens in the plugin for you. Time to do the same. With newer versions of pass (>= 1.7.0) you can install this plugin to add support for "One-Time Password" (OTP) secrets. It can even import it from a QR-code image.

If you add OTP-codes to secrets with an identical name, but with an -otp suffix, this plugin picks up on it and allows you to fill in/copy/show the OTP token. Here's an example of how it would look like in pass:

 $    tree ~/.password-store | sed 's/├/\+/g; s/─/-/g; s/└/\\/g'
/home/me/.password-store
+-- github.com
    +-- rcaldwell.gpg
    \-- rcaldwell-otp.gpg

Just a bugfix

• https://bugzilla.mozilla.org/show_bug.cgi?id=1324255 reports a bug regarding autofocus on the passphrase input field and this release contains a workaround.

This release is otherwise just an update of dependencies. They have been upgraded so they're all compatible with node.js v8, coming from node.js v4. As a side-effect, the generate keys will show <> as part of the name. This is because the email-part of the key name is left blank. This will show if you re-open options after generating a new key and when you're importing this key on your server.

Better form support

A small change towards better form support. With this change you no longer have trouble filling forms like docker hub or the firefox accounts page. These pages listen for keyboard events and only enable the login button once input has been detected and this didn't work correctly before.

web-extensions API updates!

With newer firefox versions (v52+) come new features to the web-extensions API! This time:

• https://bugzilla.mozilla.org/show_bug.cgi?id=1215025 has been fixed, meaning there is no longer a need for manually resizing the popup on content change. This means the code is coming closer together with upstream (pass-browser-chrome). A small issue came up though, but that was easily prevented to be an actual issue, in the meantime: https://bugzilla.mozilla.org/show_bug.cgi?id=1309143

• https://bugzilla.mozilla.org/show_bug.cgi?id=1197451 has been fixed, meaning this extension can finally copy your usernames and passwords. For now, however (comment 37):

  So this feature is limited to extension tabs, popups and content scripts.

  In upstream this plugin performs the copy in background.js, so unfortunately I had to move the copyToClipboard code to popup.js to get it to work for Firefox. For reasons why it doesn't work in background.js: https://bugzilla.mozilla.org/show_bug.cgi?id=1272869

Separated release from pass-browser-chrome

Newer firefox versions have better and better support for web-extension based add-ons, so I decided it was time for the firefox add-on to have its very own git repository and update it with 0.6.0 at the same time!

This repository will be merged every once in a while with upstream and have the same tags/version numbering (patch version might differ because of a different review process to get a new release in the add-on store).

Web extensions!

Currently, with web extensions it is fairly easy to create a firefox add-on from an existing chrome plugin. This is a very early release that actually should work pretty well with Firefox Nightly (v48 at the moment of release). Feedback is welcome however!

Known issues:

• popup does not size automatically to fit the content (bugzilla)
• the popup is rendered with incorrect spacing
• the "copy" button does not work, in the meantime: selecting username/password and using CTRL+C or the "fill" button does! (bugzilla)

edit: If you want me to update this firefox add-on file that is up-to-date with the master branch; just let me know and I'll make a build and sign it. This is basically a fork of the pass-browser-chrome repository so versions will be similar.

edit 2: The attached .xpi-file probably no longer works because it was never signed. Find signed .xpi files from release 0.6.0 and higher.