Repository navigation
Clear Create User plaintext password on every dialog close path #314
Description
Parent: #244
Epic: #15
Severity: Low
Execution mode: AFK
What to build
Reset the Create User form credential state whenever its dialog closes. The typed plaintext password currently survives cancellation and can reappear when the dialog is opened again. Clear it on Cancel, close button, Escape, overlay dismissal, route/unmount, and successful creation while preserving useful validation state only while the same dialog session remains open.
Acceptance criteria
- Reopening the dialog after every close path shows an empty password field.
- Successful creation clears the password before or as the dialog unmounts.
- A failed submission may retain input for correction only until the user closes the dialog.
- Password state is never written to logs, telemetry, localStorage, sessionStorage, URL state, or query caches.
- Frontend tests cover Cancel, close button, Escape, overlay dismissal, success, and unmount.
Blocked by
None.
Activity
fix(web): clear Create User password state on every dialog close path (…
fix(web): reset the whole create-user form on close, not just the pas…
fix(web): clear Create User credential state on every dialog close pa…
fix(web): clear the step-up password via the single dialog-reset path (…
fix(web): clear the step-up password via the single dialog-reset path (…
feat(api,web): require step-up authentication for privileged user adm…