Slide 1
Slide 1 text
Intro WWDC ’18 Session:
Automatic Strong Passwords and
Security Code AutoFill
Kishikawa Katsumi
Slide 2
Slide 2 text
Automatic Strong Passwords
Slide 3
Slide 3 text
No content
Slide 4
Slide 4 text
Security Code AutoFill
Slide 5
Slide 5 text
No content
Slide 6
Slide 6 text
Review: Password Autofill (iOS 11)
Slide 7
Slide 7 text
Associated Domains
Slide 8
Slide 8 text
No content
Slide 9
Slide 9 text
No content
Slide 10
Slide 10 text
if #available(iOS 11.0, *) {
emailField.textContentType = .username
passwordField.textContentType = .password
}
Slide 11
Slide 11 text
No content
Slide 12
Slide 12 text
No content
Slide 13
Slide 13 text
No content
Slide 14
Slide 14 text
No content
Slide 15
Slide 15 text
Try: Automatic Strong Passwords
Slide 16
Slide 16 text
No content
Slide 17
Slide 17 text
No content
Slide 18
Slide 18 text
No content
Slide 19
Slide 19 text
No content
Slide 20
Slide 20 text
No content
Slide 21
Slide 21 text
No content
Slide 22
Slide 22 text
No content
Slide 23
Slide 23 text
https://developer.apple.com/password-rules/
Slide 24
Slide 24 text
No content
Slide 25
Slide 25 text
No content
Slide 26
Slide 26 text
ݱ࣌Ͱ͜ͷ߲ɺ·
ͩଘࡏ͠ͳ͍Α͏Ͱ͢ɻ
Slide 27
Slide 27 text
passwordField.passwordRules =
UITextInputPasswordRules(descriptor:
“allowed: digit; minlength: 1; maxlength: 4;")
Slide 28
Slide 28 text
No content
Slide 29
Slide 29 text
ύεϫʔυΛอଘ͢Δʹ
Password Saving
Compatibility checklist
Tag fields with content types
Remove login fields from view hierarchy
Clear login fields only after removing from hierarchy
Check that AutoFill saved to the correct domain
May no longer need SecAddSharedWebCredential()
Slide 30
Slide 30 text
ύεϫʔυΛอଘ͢Δʹ
• ࣗಈͰอଘ͞ΕΔͱݴͬͯΔͬΆ͍Μ͚ͩͲɺ؍ͨ͠
ݶΓͰɺը໘ΛҠಈͯ͠ɺϏϡʔ͔ΒςΩετϑΟʔ
ϧυΛআͯ͠อଘ͞ΕΔ༷ࢠͳ͔ͬͨɻΑ͘Θ͔Β
ͳ͍ɻ
Slide 31
Slide 31 text
Try: Security Code AutoFill
Slide 32
Slide 32 text
No content
Slide 33
Slide 33 text
No content
Slide 34
Slide 34 text
No content
Slide 35
Slide 35 text
No content
Slide 36
Slide 36 text
NOTE: ؔͳ͍SMSʹԠ͠·͢ɻ
Slide 37
Slide 37 text
No content
Slide 38
Slide 38 text
No content
Slide 39
Slide 39 text
No content
Slide 40
Slide 40 text
Failure cases
Slide 41
Slide 41 text
Failure cases
InstagramͷSMS
ӳޠͷͷͩͱਖ਼͘͠ิ͞ΕΔ͕ɺ
ຊޠͷͷิ͞Εͳ͔ͬͨɻ
ηογϣϯͰݴٴ͞Ε͍ͯΔ͕ɺ
͏·͘ಈ͔ͳ͍ύλʔϯ͕͋ͬͨΒ
όάϨϙʔτ͠·͠ΐ͏ɻ
ॻ͍ͨ௨ΓɺҙͷSMSͰಈ࡞͢ΔͷͰ
ύλʔϯͷݕূҙ֎ͱ؆୯Ͱ͢ɻ
ͨͩ͠ɺσόΠεͷݴޠઃఆͳͲͰ
݁Ռ͕มΘͬͯΔΑ͏ʹݟ͑ΔͷͰɺ
ͦͷลΓཁௐࠪɻ
Slide 42
Slide 42 text
Summary
• Web (Safari) ͰΘΕ͍ͯͨύεϫʔυͷࣗಈੜʢ& อଘʣiCloud KeychainʹΑΔ
ࣗಈิΛΞϓϦͰ͑ΔΑ͏ʹ͢ΔΈʢiOS 11Ͱ෦తʹ࣮ݱͰ͖͍ͯͨʣ
• Ϣʔβʔ͕σεΫτοϓͰSafariΛ͍ͬͯͳͯ͘ɺiPhoneͰMobile SafariΛͬͯ
͍ΔՄೳੑߴ͍ͷͰɺiPhoneͷWebͰ̍ͰϩάΠϯ͍ͯ͠Εิ༗ޮʹͳΔ
Մೳੑ͕ߴ͍
• ରԠͷίετখ͍͞ͷͰɺରԠ͓ͯ͘͠ͱΛ͛Δͣ
• ࣮ࡍͷڍಈΑ͘؍ɾςετ͢Δඞཁ͋Γɻ͓͔͠ͳڍಈΛݟ͚ͭͨΒใࠂΛɻ
• 2 Factor Authͷิศར͕ͩɺSMSʹΑΔίʔυૹ৴ࢦఠ͞Ε͍ͯΔͷͰɺ
ϓϩδΣΫτʹΑͬͯݕ౼ͷ༨͕େ͍ʹ͋Δɻ
• ΧελϜͨ͠ύεϫʔυϧʔϧͷςετͷखஈ͕ͳͦ͞͏ʁ
Slide 43
Slide 43 text
Resources
• [204] Automatic Strong Passwords and Security Code
AutoFill
• [721] Implementing AutoFill Credential Provider
Extensions
• Password Rules Validation Tool
https://developer.apple.com/password-rules/