I have a web application that, in a conventional way, asks for a username and password to login to the system.
This user and password are encapsulated in a form (simplified example):
<form id="formLogin">
<input type="text" id="usuarioLogin"></input>
<input type="password" id="senhaLogin"></input>
</form>
Now inside the application I have another form that requests a different credential, for a specific procedure. The form is very similar, but note that the id's are different:
<form id="formCredencialEspecial">
<input type="text" id="usuarioCredencial"></input>
<input type="password" id="senhaCredencial"></input>
</form>
Result: The browser remembers the login password, although it is a different password. The user can change the password and validate the special credential, but this again saves a password that is now invalid for login (first form).
How can I tell the browser that these forms are different credentials, and should be stored as separate passwords?
Comments:
- These web pages compose a SPA (developed in Aurelia ), and are within the same domain AND HTTP resource;
- The reason for requesting a second credential is not under discussion in this matter.