172

I would love to see this. I was about to create a new topic for this but decided to search. I tried to get Brave browser to do this, to no avail. Hopefully, Orion can get this done!

    We still need a link to any documentation that would allow su to do this (likely not a public feature)

    • pk likes this.

    I wish I could be more help. I'll poke around when I get a chance to see if any searching comes up with anything. I'm just a C# guy who's never done much work for the Apple ecosystem.

      a month later

      Is It possible to add autofill verification code form messages?

        Merged 1 post from Auto Full Verification code from text.
          3 months later

          Found a WWDC presentation about this feature here. I'm not sure if this can be of any help to implement this feature on Orion. Honestly, this is a very beloved feature that I'm very much interested to be implemented. Password AutoFill starts at 7:27

          Apple Developer AutoFill

            Vlad

            Not that I know of. However, I think that Android version of Google Chrome does automatically copy message codes to text fields on websites. Nevertheless an awesome feature to have it on Orion.

                Maybe but I'm not sure how Safari does it though. I think Google Chrome is also catching up on it especially on the Android version. I've not seen this done on desktop version by any player other than Safari.

                • Vlad replied to this.

                  kunaguvarun Safari does it because it has direct access to SMSes. Apple does not make that available for 3rd party apps.

                      2 months later

                      Text messages as an authentication method are not secure anyway. Sure it is very nice Safari/macOS functionality but the world will move forward towards PassKey etc. very soon.

                        3 months later

                        ericafterdark

                        Okay, do the world a favour and tell all the websites to stop using it.
                        What are you a blackhat researcher? Bah

                            21 days later
                            a month later

                            Brief Summary
                            Autofill one-time SMS passcodes sent to iMessage similarly to how Safari does that.

                            Details:
                            Basically, nothing special. In the screenshot below I show an example of how this feature works at google.com using Safari. I have iMessage synced on my Macbook. Afaik that is pretty old feature.

                            Image/Video:

                            Merged 2 posts from Add support for one-time SMS passcode autofill..
                              24 days later

                              I did a small amount of reading what 2fhey does. They poll the file "/Library/Messages/chat.db"1 in the home folder and read the changes. It is an sqlite database file which requires full disk access permission to read. When new messages are found they filter out any that are not OTP. For the filtering they use specific message tests2 to determine what the code is and the service the code belongs to3.

                              [1] https://github.com/SoFriendly/2fhey/blob/main/TwoFHey/DataManagement/MessageManager.swift#L47
                              [2] https://github.com/SoFriendly/2fhey/blob/main/TwoFHey/OTPParser/OTPParserContants.swift#L9
                              [3] https://github.com/SoFriendly/2fhey/blob/main/TwoFHey/OTPParser/OTPParser.swift#L124

                              Possibly relevant side note: there is some talk online about newer (macOS 13) message content data being encoded as a plist rather than plaintext. I do not know if that applies to SMS messages or not.

                              • Vlad replied to this.

                                running-catastrophe Thanks for digging deeper into this. How would this work in Orion and at what time you imagine Orion would ask for full access permissions?