Page MenuHomePhabricator

Add iCloud KeyChain support
Closed, InvalidPublic

Description

As a user who logs into Wikipedia using the Safari mobile web browser with iCloud KeyChain support, I would like my login credentials that are stored to automatically be used when I use the app.

Submitted by a TestFlight user.

Event Timeline

dr0ptp4kt raised the priority of this task from to Needs Triage.
dr0ptp4kt updated the task description. (Show Details)
dr0ptp4kt moved this task to Needs Triage on the Wikipedia-iOS-App-Backlog board.
dr0ptp4kt subscribed.
Deskana subscribed.
Fjalapeno claimed this task.
Fjalapeno subscribed.

This is not possible in iOS. Apps cannot access Safari's passwords.

Brandon subscribed.

Actually Fjalapeno, you are incorrect; this feature was added in iOS 8.0 and is known as Shared Web Credentials (developer reference page).

It was announced about one year ago, at a WWDC 2014 session entitled "Your App, Your Website, and Safari"

slide.jpg (1,817×1,111 px, 195 KB)
QuickTime Movie || download slides (PDF)

Granted, it does require hosting a signed JSON file at the top-level of the wikipedia.org domain, and I understand that this wouldn't be a high priority feature request—few developers are aware of it (and probably fewer users realize this is possible)—but it would benefit all users who have logged in to (potentially) any Wikimedia Foundation site with their unified login!

So long as they chose to "remember this password," whether it was on their iOS device, or even on a Mac if they have iCloud Keychain enabled. It improves the password security of wikipedia users on apple devices by not requiring them to copy & paste their credentials from the Settings app, not to mention the convenience, when a first time downloader of the official Wikipedia app is immediately greeted with a one-tap button to sign in to their wikimedia account, immediately allowing them, nay, encouraging them, to edit under their username the next time they see an article they're able to contribute to.

A single small entitlement added to the app, along with the JSON file on the server, would go a long way in this win-win-win scenario. Please consider it; that is all I'm asking!

@Brandon - didn't realize that the website could host something to make this possible.

I'll work with @dr0ptp4kt to see if this is something we can get implemented server side. Since this requires modifying the mediawiki, this will take longer than if it was something we would implement in the app.

More info on implementing this:
http://www.raywenderlich.com/90978/secure-passwords-with-safari-autofill-ios-8

This is the JSON we need to serve in mediawiki:

{
   "webcredentials": {
       "apps": ["AKK7J2GV64.org.wikimedia.wikipedia"]
    }
}

Apple is showing iOS 11 improvements to Password AutoFill for Apps today at a WWDC session. (it's streaming live right now and should be available later today at https://developer.apple.com/videos/play/wwdc2017/206/)

It looks like they're using a number of things to 'teach' iOS to associate apps with their official website(s) and automatically offer iCloud Keychain/Safari saved passwords as a suggestion in the predictive keyboard when logging in to apps.

This feature may solve this feature request, at least for iOS 11 users.

94E18FAB-5128-4683-A0EC-240D5CB8A6B8.png (1,125×2,436 px, 569 KB)

Yup, iOS11 has autofill ready for them when they try to login.