authgear / authgear/authgear-server

[Epic] iOS's new Password App Support

Open
#4,309 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

# Acceptance Criteria:

### Creating an entry in the Passwords App

- [ ] Users can choose to save the username/phone/email & password credentials to the Passwords app after signing up with an Authgear powered app / website
- [ ] Users can see passkeys created by Authgear powered app / websites in the Passwords app with the correct details (project name / icon) being shown
- [ ] Users can see the TOTP authenticator entry using the correct information configured by the project owner in the authgear admin portal, namely:
1. The name of authenticator: Project Name
2. Icon of the authenticator: Logo in the project's default language
- [ ] Users can go to the change password page directly from the passwords app in the device's default web browser
- [ ] By adding support for /.well-known/change-password
- Related: [DEV-86 : Support Well-Known URL for Changing Passwords​]()

### Auto Fill Support:

- [ ] Users can see the option to use autofill when trying to login to an app / website powered by Authgear, to fill in details like username / phone / email & password
- [ ] Users can see the option to use autofilling when they focus on a TOTP verification code screen in the app / web if an entry for the current service is setup in the device's Passwords app.

### Updating an Entry in the Passwords app

- [ ] Users can see the option to update saved password when they changed the password in an Authgear powered app / website.

### **TOTP related:**

- [ ] On iOS 18 or later, users can see an option to add TOTP automatically by clicking a link in the setup Authenticator screen after they created an account when TOTP 2FA is used in an Authgear powered **apps**
- [ ] On iOS 18 or later, users can see an option to add TOTP automatically in the setup Authenticator screen after they created an account with username/email and password in an Authgear powered **website**
- [ ] Users can see a TOTP authenticator entry being added automatically to the default verification code app (e.g. The new Passwords app on iOS 18) after clicking the option.) when they use the new "Click to add authenticator" option
- [ ] Users can use the TOTP generated to pass the TOTP challenge in Authgear
- [ ] Users can click on links to open a few supported / recommended authenticator app, including:
- [ ] Google Authenticator
- [ ] Authy
- [ ] Passwords (available on iOS 18 or later devices)
- [ ] Authgear's TOTP app
- [ ] @fungc-io can you supplement the download link to the apps @\_@?

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points; begin by locating the iOS authentication, passkey, TOTP, and well-known URL flows in the repository. Treat the acceptance criteria as separate deliverables and verify each listed Passwords app, autofill, password-update, and authenticator-link behavior before considering the epic done.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios
Domain
authentication, mobile, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.