Thanks for the link we will have a look. Need to prioritize OTP implementation first end to end. SMS becaomse a rare use case when you have OTP fully set in browser.
Retrieve 2FA codes from messages when signing in
- Edited
in the latest mac os, and ios, auto filling two factor authentication received via text messages is now supported in browsers besides safari, no other browser has embraced this support yet, and itd be great for users, and Orion to be the first.
I would love to see this. I was about to create a new topic for this but decided to search. I tried to get Brave browser to do this, to no avail. Hopefully, Orion can get this done!
We still need a link to any documentation that would allow su to do this (likely not a public feature)
I wish I could be more help. I'll poke around when I get a chance to see if any searching comes up with anything. I'm just a C# guy who's never done much work for the Apple ecosystem.
Is It possible to add autofill verification code form messages?
- Edited
Found a WWDC presentation about this feature here. I'm not sure if this can be of any help to implement this feature on Orion. Honestly, this is a very beloved feature that I'm very much interested to be implemented. Password AutoFill starts at 7:27
kunaguvarun Does any other browser (Chrome/Edge/Firefox) have this feature?
- Edited
Not that I know of. However, I think that Android version of Google Chrome does automatically copy message codes to text fields on websites. Nevertheless an awesome feature to have it on Orion.
kunaguvarun It is because it is currently not possible.
Maybe but I'm not sure how Safari does it though. I think Google Chrome is also catching up on it especially on the Android version. I've not seen this done on desktop version by any player other than Safari.
- Edited
kunaguvarun Safari does it because it has direct access to SMSes. Apple does not make that available for 3rd party apps.
Text messages as an authentication method are not secure anyway. Sure it is very nice Safari/macOS functionality but the world will move forward towards PassKey etc. very soon.
- Edited
Okay, do the world a favour and tell all the websites to stop using it.
What are you a blackhat researcher? Bah
Thanks for the reference it looks like this is indeed somehow possible.
Code for 2hey is here
https://github.com/SoFriendly/2fhey
Brief Summary
Autofill one-time SMS passcodes sent to iMessage similarly to how Safari does that.
Details:
Basically, nothing special. In the screenshot below I show an example of how this feature works at google.com using Safari. I have iMessage synced on my Macbook. Afaik that is pretty old feature.
Image/Video: