Typed wrong password, still logged in

[CPColin]

I don't have my password saved, so Pidgin asks me for my Facebook password when I start it. I accidentally typed the wrong one in and was still logged in. I can even type stuff like "nope" and it works. I'm not sure if my real password is getting cached somewhere, or what.

[ghokun]

Account information (including passwords) can be found at ~/.purple/accounts.xml

[dequis]

Duplicate of #193

The password is only used for the first login, it uses access tokens afterwards.

[CPColin]

In my opinion, there's two bugs, then:

1. The dialog box shows on every login, even though it's not needed after the first time.
2. A user could save his or her password in accounts.xml, even though that password isn't used.

Seems like the dialog should be suppressed, if possible, and the "Save Password" option should be disabled, again, if possible.

[dequis]

I think that's all out of our control, they are pidgin UI issues.

The password is used and saving it is useful - access tokens don't last forever and the password is needed to refresh them. But we have no way to tell the UI that we need the password only sometimes.

[EionRobb]

@dequis what about with the password-optional flag on the connection?