How to show autofill suggestion without managed shared credentials? React native IOS - ios

I have this task that need to show the suggested username & password on my app.
something like this that I found [credits to this site]
https://brainsandbeards.com/blog/quick-change-that-helps-ios-users-sign-in-quicker
or something like this
Other way to autofill
But every time I press the 'password' on the top of the keyboard it always goes directly to the list of keychains and not giving the option like the above image showing a suggested account or choose other passwords.
I even followed this documentation:
https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_developer_associated-domains
even use an 'alternate-mode' on the associated domain.
I suspect that the webserver we're using is not managed shared credentials enabled server?
Is there a possibility to do this without associated-domain capability?
Thanks in advance!

Related

How to provide an option to save username and password to iCloud Keychain on iOS in NativeScript Angular?

I am working on a NativeScript iOS app. The app has a login page which requires users to login before they can use the app. I just wanted to add more convenience for the users to not have to type in the username and password everytime. So, I added the nativescript-fingerprint-auth plugin to enable touch/face id, which is working fine.
Now, I also wanted the app to provide an option to save the password to Keychain on the initial login and provide an option to autofill the password in the next login. Much like shown in the screenshot. So any kind of information regarding this would be helpful.
Thank you in advance!
img source

Is there a way of resetting a user's password in Realm Database

I would like to be able to reset a user's password, in the case they have forgotten it. Is this possible using the Realm framework. As a natural extension to this problem, would is there a way of changing the user's password upon entering (correctly) their current password.
I am creating an iOS application in Swift.
Thanks in advance!
If you are using Realm Mobile Platform, we provide SyncUser.changePassword(_:, completion:) and SyncUser.changePassword(_:, forUserID:, completion:) APIs.
https://realm.io/docs/swift/latest/#changing-passwords
We have not provided a convenient way to achieve "Forgot password?" feature currently, so you need implement such UI and workflow yourself.
is there a way of changing the user's password upon entering (correctly) their current password.
You need to try logging in to see if the current password is correct.

Autofill,save password,spellcheck,Application cache in WkWebview

I am looking for a way to do AutoFill,SavePassword and Spellcheck in WkWebView
AFAIK
SpellCheck(spellcheck="true"),Autocomplete('autocomplete','off') can be done by specifying HTML Attributes
SavePassword and Autofill can be worked around using stringByEvaluatingJavaScriptFromString and NSUserDefaults
I have an webapp which is going to be loaded in WkWebView and I'd like to facilitate SavePassword,AutoFill and Spellcheck using WkWebView itself.
Does WkWebView provide any interface to directly deal with these ?
Any suggestions are appreciated !
While this DOES allow autofill/keychain to fill credentials on a properly set-up trusted domain through wkwebview, it still does not allow the SAVE/STORAGE of user/pass upon entry. This behavior is strange - meaning one can use their web credentials to sign into an app which also includes this domain as trusted, but the user cannot save their user/pass FROM the app/wkwebview despite it being trusted. There is no documentation from Apple explaining this discrepancy - and many have the same issue.
AFAIK, Apple doesn't allow us to use Autofill in WKWebview because the app may steal your information.
Enable Password AutoFill
Password AutoFill uses heuristics to determine when the user logs in or creates new passwords, and automatically provides the password QuickType bar. These heuristics give users some Password AutoFill support in most apps, even if those apps haven’t been updated to support AutoFill. However, to provide the best user experience and ensure your app fully supports Password AutoFill, perform the following steps:
Set up your app’s associated domains. To learn how to set up your app’s associated domains, see Supporting Associated Domains.
Set the correct AutoFill type on relevant text fields. For an iOS app, see Enabling Password AutoFill on a Text Input View. For a web app, see Enabling Password AutoFill on an HTML Input Element.
https://developer.apple.com/documentation/security/password_autofill

Still shows example app after setting Everyplay Client ID and secret

I registered a developer account and added a game. Then I added the client id and secret to the app with
[Everyplay setClientId:xxx clientSecret:xxx redirectURI:xxx];
and tried to upload a video. But it showed the example app instead of the name and icon of my game. Did I miss some steps? Or is this normal behaviour for development build? Thanks.
Have you tried logging out trough the settings menu? If you have previously shared (or visited the sharing screen) or otherwise logged in using the example app credentials a login token has been created and stored matching those details. If this is the case, simple logout should solve the problem.
Hope this helps.

Implementing password reset method on iPhone and Android apps?

I'm having trouble finding a way to provide users a reset password method for my apps.
Unlike this question, I don't wan't to manage it locally, instead I prefer to validate the user by some sort of connection to my server.
Should I validate the user via e-mail? By sending him a link containing a key like:
http://www.myweb.com/inc/mobile/activate.php?email=pepe%40hotmail.com&key=252b6a8e98b8109cda4f53500a419b62
I'm not sure how to make that work without using any webView.
Or maybe the best approach is to e-mail them a link to a website in which they can reset their password (like in Path).
Please, can someone point me in the right direction?
Any help would be appreciated.
The safest approach is to have your app contact the site, and have your site send an email to the user with a password reset link. It seems fairly common to provide a GUI in your app telling the user to check his email for the password reset instructions.
That way, if an impostor gets access to the app, he may not have access to the email or may not know the credentials for your site.
Your GUI could be done natively or with a webView. I am not sure why you are trying to avoid a webView in any event, but it is not required.

Resources