samuelclay / NewsBlur

NewsBlur is a personal news reader that brings people together to talk about the world. A new sound of an old instrument.
http://www.newsblur.com
MIT License
6.84k stars 995 forks source link

Android: Google password manager doesn't detect this #1838

Open dev-ardi opened 9 months ago

dev-ardi commented 9 months ago

I'm not sure how this works but on most apps google password manager is able to detect that the account corresponds to the web interface. Maybe something non standard is happening?

It's able to fill it just fine if I manually look for it though.

sictiru commented 9 months ago

@dev-ardi I'm not very familiar with the google password manager and the Android credential manager API. From a glance it looks like the account needs to be registered in the password manager at account creation but I might be wrong. I'm not sure what you mean by detect that the account corresponds to the web interface. Could you post a video with an example?

Yes support for autofill was recently introduced.

shuvashish76 commented 4 months ago

I'm not sure what you mean by detect that the account corresponds to the web interface.

I guess they meant their password manager fails to detect the NewsBlur account which basically means fails to detect their account on the database for the android package name com.newsblur. It should automatically add the android package name to corresponding account (with https://www.newsblur.com/, assuming you added the NewsBlur account to password manager databse from websiote) but you've to use "search & choose" functionality for android when you auto-fill OR just add it manually to the relevant account of the database.

I've 2 issues here A. AutoFill service doesn't fill the password field (separate issue) B. Doesn't matter if you use AutoFill or Magikeyboard of KPDX it never works for the 1st time because NewsBlur gets removed from the background. IIRC Bitwarden has same issue for NewsBlur but since I don't use Bitwarden anymore I can't conform it.

Could you post a video with an example?

Demonstration of both AutoFill & Magikeyboard

https://github.com/samuelclay/NewsBlur/assets/48226312/07f93549-52f3-4eca-83d3-8cb5a24e23fd

Logs: test_nb.log are taken with LogFox with NewsBlur setup as the filter.

Steps:

  1. Open NewsBlur > Select AutoFill or Magikeyboard
  2. Which then opens up your password manager > unlock with password or biometric
  3. If your accounts (name or email/password/android_package name or website) are already setup on password manager then it should auto-type them on your requested app i.e. NewsBlur (that's how other apps behave). But here the problem is it redirects to home i.e. for some reason NewsBlur removed from background though not exactly closed from device recent. (Not sure what's the technical term for it...it happens due to cold launch? soft launch?)
  4. Then as long as your password manager is open i.e. the database is decrypted you can open NewsBlur & the auto-type works as it should be.
sictiru commented 3 months ago

During my tests auto fill worked as expected with Google, Firebox and Bitwarden (without leaving the app) but when I access the vault to select the credentials it does put the app in the background. There is no error and I don't see any hints in the logs why would this happen. I'll keep looking into possible solutions.

@samuelclay I think associating the website and mobile app data would help share the credentials https://developer.android.com/identity/autofill/autofill-optimize#associate