search

browserpass / browserpass-extension

Browserpass web extension
ISC License
852 stars 53 forks source link

Feature request: rely on Apple's Password Manager Resources for better User Experience #281

Open yvan-sraka opened 2 years ago

yvan-sraka commented 2 years ago

Apple open-source have a repo that contain a bunch of JSON with quirks about how website behave with passwords https://github.com/apple/password-manager-resources I would be very glad if browserpass-extension could rely on some of these to provide a better user experience.

For e.g. I have a password stored twice in my pass store for both https://steamcommunity.com and https://steampowered.com website, which are in fact using the same log in system ("Shared Credentials" quirks).

I could complete this issue with further use cases, or try to investigate what would be accurate to do with these different quirks:

  • Password Rules: Rules to generate compatible passwords with websites' particular requirements.
  • Shared Credentials: Groups of websites known to use the same credential backend, which can be used to enhance suggested credentials to sign in to websites.
  • Change Password URLs: To drive the adoption of strong passwords, it's useful to be able to take users directly to websites' change password pages.
  • Websites Where 2FA Code is Appended to Password: Some websites use a two-factor authentication scheme where the user must append a generated code to their password when signing in.
maximbaz commented 2 years ago

That repo is actually quite an impressive effort, thanks for showing it! Will definitely keep an eye.

I think it would be nice to deal with some more low-hanging fruit before investigating this request further, there are several things and PRs that never got enough time to be completed... Including password generation / editing features, without which some of those quirks are not relevant yet...

For reference (not saying that "Shared Credentials" quirk won't be useful - it probably will), but until then you may want to look into symlink approach we recommend, which is compatible with all pass workflows and scenarios, not just Browserpass.