Zaki/Password-Manager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(security): "Lock vault when Windows locks or sleeps" toggle (default ON)

Browse Source 
Explicit opt-out for users without Quick Unlock who don't want to retype the
master password after every sleep. Default ON = exact historical behavior
(lock on WTS lock/suspend, with the documented Quick Unlock exemption —
DPAPI already gates access via the Windows account). Synced setting,
Settings > Security.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
r-zakarya
2026-07-13 05:17:16 +01:00
parent 8555661823
commit a090c64081
2 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
index.html
+13
View File
@@ -566,6 +566,19 @@
<option value="60">60</option> <option value="60">60</option>
</select> </select>
</div> </div>
<div class="setting-row">
<span>
Lock vault when Windows locks or sleeps
<small class="setting-hint">
With Quick Unlock enabled the vault stays unlocked
anyway — Windows sign-in already gates access.
</small>
</span>
<label class="toggle">
<input type="checkbox" id="settingLockOnSystemLock">
<span class="toggle-slider"></span>
</label>
</div>
<div class="setting-row"> <div class="setting-row">
<span>Ask before moving to trash</span> <span>Ask before moving to trash</span>
<label class="toggle"> <label class="toggle">
js/app.js
+17
View File
@@ -86,6 +86,9 @@ const Bridge = (() => {
// re-locking is redundant — we just stay unlocked and the user is // re-locking is redundant — we just stay unlocked and the user is
// back where they left off when they return. // back where they left off when they return.
onSystemLock() { onSystemLock() {
// Explicit user opt-out (Settings → Security). Default ON keeps
// the historical behavior below.
if (state.lockOnSystemLock === false) return;
if (state.quickUnlockEnabled) { if (state.quickUnlockEnabled) {
if (typeof toast === 'function') if (typeof toast === 'function')
toast('System lock — vault kept unlocked (quick unlock active)'); toast('System lock — vault kept unlocked (quick unlock active)');
@@ -650,6 +653,7 @@ const state = {
autofillEnabled: localStorage.getItem('autofillEnabled') !== '0', // default ON autofillEnabled: localStorage.getItem('autofillEnabled') !== '0', // default ON
autofillClearField: localStorage.getItem('autofillClearField') !== '0', // default ON autofillClearField: localStorage.getItem('autofillClearField') !== '0', // default ON
clipboardClearSeconds: parseInt(localStorage.getItem('clipboardClearSeconds') ?? '30', 10), // 0 = never clipboardClearSeconds: parseInt(localStorage.getItem('clipboardClearSeconds') ?? '30', 10), // 0 = never
lockOnSystemLock: localStorage.getItem('lockOnSystemLock') !== '0', // default ON
autofillFailBalloon: localStorage.getItem('autofillFailBalloon') !== '0', // default ON autofillFailBalloon: localStorage.getItem('autofillFailBalloon') !== '0', // default ON
// Hotkey combos. Each combo = { ctrl, shift, alt, win, key }. // Hotkey combos. Each combo = { ctrl, shift, alt, win, key }.
// key is the uppercase character or VK label ('A'..'Z', '0'..'9', // key is the uppercase character or VK label ('A'..'Z', '0'..'9',
@@ -6398,6 +6402,7 @@ function openSettings() {
$('#settingTrashPurge').value = String(state.trashAutoPurgeDays || 0); $('#settingTrashPurge').value = String(state.trashAutoPurgeDays || 0);
$('#settingPasswordExpiry').value = String(state.passwordExpiryDays || 0); $('#settingPasswordExpiry').value = String(state.passwordExpiryDays || 0);
$('#settingClipboardClear').value = String(state.clipboardClearSeconds ?? 30); $('#settingClipboardClear').value = String(state.clipboardClearSeconds ?? 30);
$('#settingLockOnSystemLock').checked = state.lockOnSystemLock !== false;
$('#settingEditorPosition').value = state.editorPosition || 'right'; $('#settingEditorPosition').value = state.editorPosition || 'right';
$('#settingConfirmUnsaved').checked = state.confirmOnUnsaved !== false; $('#settingConfirmUnsaved').checked = state.confirmOnUnsaved !== false;
// PIN unlock — only meaningful when DPAPI is available. // PIN unlock — only meaningful when DPAPI is available.
@@ -6796,6 +6801,8 @@ const SYNCED_SETTING_KEYS = [
'autofillFailBalloon', 'autofillFailBalloon',
// Seconds before a copied secret is auto-cleared (0 = never). Default 30. // Seconds before a copied secret is auto-cleared (0 = never). Default 30.
'clipboardClearSeconds', 'clipboardClearSeconds',
// Lock the vault when Windows locks / sleeps (default ON).
'lockOnSystemLock',
]; ];
// Sets `data-editor-position` on <body> so CSS can swap the slideover // Sets `data-editor-position` on <body> so CSS can swap the slideover
@@ -6885,6 +6892,9 @@ async function loadServerSettings() {
case 'clipboardClearSeconds': case 'clipboardClearSeconds':
localStorage.setItem('clipboardClearSeconds', String(v)); localStorage.setItem('clipboardClearSeconds', String(v));
break; break;
case 'lockOnSystemLock':
localStorage.setItem('lockOnSystemLock', v ? '1' : '0');
break;
} }
}); });
// Apply visual settings immediately. // Apply visual settings immediately.
@@ -7586,6 +7596,13 @@ async function init() {
saveServerSettings(); saveServerSettings();
toast(n === 0 ? 'Clipboard auto-clear disabled' : 'Copied secrets clear after ' + n + 's'); toast(n === 0 ? 'Clipboard auto-clear disabled' : 'Copied secrets clear after ' + n + 's');
}); });
$('#settingLockOnSystemLock').addEventListener('change', e => {
state.lockOnSystemLock = e.target.checked;
localStorage.setItem('lockOnSystemLock', e.target.checked ? '1' : '0');
saveServerSettings();
toast(e.target.checked ? 'Vault will lock when Windows locks'
: 'Vault stays unlocked when Windows locks');
});
$('#settingPasswordExpiry').addEventListener('change', e => { $('#settingPasswordExpiry').addEventListener('change', e => {
const n = parseInt(e.target.value, 10) || 0; const n = parseInt(e.target.value, 10) || 0;
state.passwordExpiryDays = n; state.passwordExpiryDays = n;