4 ms·
"Native apps don't usually remain authenticated" Thanks for the correction, I admit I have limited knowledge of production ready native app development! As wit
by shrew 7y ago
"Native apps don't usually remain authenticated"
Thanks for the correction, I admit I have limited knowledge of production ready native app development! As with the UI issue, a PWA developer could still use the JS crypto APIs to roll their own secure store for credentials, or store something similar to an API key issued on successful authentication? Handling this kind of data correctly has a lot of pitfalls, which is likely why most PWAs still use standard authentication processes.
There are APIs and specs [0] [1] [2] that have been floating about for at least the last couple of years which aim to solve credential and authentication management in a more formal way in the browser, but as with many of these features, they're slower moving than the native SDKs. I still don't believe that makes it impossible to achieve a similar flow in a PWA but I certainly concede it's much harder to get right (secure and convenient).
"Can you tell me how?"
As a disclaimer, I jumped ship to 1Password before I jumped ship to iOS, so I've never actually done this with LastPass. But this article[3] appears to offer a similar experience to what I have with 1Password:
- I go to an app or website
- A prompt above the keyboard offers to autofill with credentials
- I tap it and authenticate with 1Password (it normally pre-filters the list by app or website I'm using)
- When I make a selection it autofills everything it can
In 1Password, there is also the option to keep your OTP seed stored too, in which case it will copy the OTP to your clipboard for a short time (and slightly invalidate the purpose of 2FA...).
[0] https://news.ycombinator.com/item?id=16801858 https://news.ycombinator.com/item?id=16801858
[1] https://github.com/WebKit/explainers/tree/master/IsLoggedIn https://github.com/WebKit/explainers/tree/master/IsLoggedIn
[2] https://w3c.github.io/webappsec-credential-management/ https://w3c.github.io/webappsec-credential-management/
[3] https://blog.lastpass.com/2018/09/get-in-app-autofill-with-lastpass-ios-12.html/ https://blog.lastpass.com/2018/09/get-in-app-autofill-with-l...