Support for Vercel preview links
We host our site on Vercel, and leverage their preview links for development and QA. These links are generated for each new feature our team is working on, and have a format similar to:
https://<feature>-<organization>.vercel.app
We use the same login info for all the preview sites, but 1pass does not seem to recognize these domains when using vercel.app as the URL (or any other variation).
Is there a way to enable willdcard or subdomain matching to work for these links? It's a major pain-point for our team jumping between different feature branches throughout the day.
1Password Version: 7.9.9
Extension Version: 2.9.0
OS Version: MacOS 13.2
Browser:_ Chrome
Comments
-
Hey @cjkochis,
I'm so sorry for the delay in getting back to you.
I have filed a request with the team to see if we can improve the behaviour when using Vercel preview links in a future update.
We are always looking to improve the autofill behaviours of 1Password so I recommend updating to 1Password 8 at your earliest convenience as 1Password 7 will not receive these new feature updates. Within 1Password 8 we have recently introduced exact matching for domains so you can choose whether an item is offered across and entire domain on a specific sub domain. Here is some more information: Change where a login is suggested and filled.
Let us know if you have any questions!
ref: 32701067
0 -
Hi @steph.giles ,
Thanks for the reply, and filing the request. This feature would be greatly appreciated by our team.
FYI, I did update to 1Password8, and still does not seem to match across the Vercel subdomains.
0 -
Hey @cjkochis,
Thank you for getting back to me.
I hope we can improve the behaviour in 1Password 8 in a future update.
0 -
I suspect this is because .vercel.app is on the "eTLD" list 1. That means the domain .vercel.app is effectively a top-level domain (like .com or .org). This is relevant for security because it means that anyone can host something on a subdomain.
For example, browsers use this list for cookie security and I suspect 1password is also using this list to see if two domains can be considered related. E.g.:
- If you have a password for a.google.com, you should also be able to use it on b.google.com.
- But if you have a password for a.uk.org, you should not be able to use it on b.uk.org.
.com, .uk.org and .vercel.app are all considered effective top-level domains (eTLD). And only if the domain one down from the eTLD (so-called eTLD+1) is the same, the domains should be considered related.
That being said, it is extremely annoying: Vercel is a service for developers, the Vercel preview environments on .vercel.app are only used to preview websites, and Vercel is constantly generating new Preview environments with defacto random names.
If I save a login for a preview (.vercel.app) URL, I will almost always want to use it on another preview domain. And the chances of someone tricking me into filling the password into a preview environment from someone else are relatively small.Please make an expectation for .vercel.app. Yes, it should be on the eTLD list but no IMO 1Password should not treat it like other eTLDs.
0 -
I just ran into this same issue today. Would LOVE a fix.
0 -
-
Any update on this?
0 -
Hey @cjkochis,
I'm afraid I don't have any updates at this time but I have flagged it again with the team.
Let us know if there's anything else we can help with and have a great weekend!
0 -
As an alternative for work around for this issue, you can ask the dev team to assign a custom domain for the Vercel preview environments (e.g. random-id.preview.yoursite.com), so that your environment is always on a subdomain.
0 -
Thank you for sharing this @nzCharlie!
0 -
Hi there, just wanted to check in and see if there is any update on the feature request.
0 -
@EvonG1P - I'd like to +1 on this feature request.
Although nzCharlie's solution would work, its additional cost for us that isn't acceptable right now.
We've also recently moved over from LastPass which had the wildcard feature that helped with this, so the dev team is busting my chops a bit on the change.
Any advice or alternate solutions would be amazing, we're in the exact same postion as @cjkochis (and many others historically looking through previous posts).
0 -
@HulerDan, thank you for your reply. I've shared your feedback with our product team.
I'm sorry, I don't have an alternate solution other than to save the "example.vercel.app" website URL to the Vercel Login item. I realize this may not be ideal, and I apologize for any interruption in your workflow caused by this issue.
I hope that helps.
-Evon
ref: PB-38963154
0
