apple/password-manager-resources
Password Manager Resources
Este proyecto es una base de conocimientos y colección de recursos estáticos para el desarrollo de gestores de contraseñas. Proporciona un repositorio centralizado de datos y reglas utilizadas para identificar comportamientos de credenciales de sitios web y requisitos de complejidad de contraseñas.
El conjunto de recursos incluye un mapeo de identificadores de aplicaciones nativas a dominios web para facilitar el intercambio de credenciales y un registro de peculiaridades de sitios web para manejar flujos de autenticación no estándar. También contiene un sistema para agrupar dominios afiliados que comparten credenciales para mejorar la precisión de las sugerencias de cuentas.
El proyecto cubre una amplia gama de capacidades de gestión de credenciales, incluyendo la localización de páginas de cambio de contraseña, detección de solicitudes de credenciales de terceros y la identificación de sitios que requieren que se añadan códigos de dos factores a las contraseñas. También incluye un analizador de reglas que convierte los requisitos de complejidad de contraseñas legibles por humanos en formatos legibles por máquina y mapeos que conectan los navegadores web con sus respectivas tiendas de extensiones.
Features
- Password Management - Provides a knowledge base of website behaviors and password requirements for password manager development.
- Knowledge Bases - Acts as a centralized knowledge base of website credential behaviors and password complexity requirements for password manager developers.
- Credential Behavior Quirks - Maps specific web domains to non-standard credential behaviors to ensure correct password manager handling.
- Autofill Integrations - Improves login suggestions by mapping shared domains and linking native application IDs to web accounts.
- Shared Web Credentials - Groups websites that share a single set of credentials to provide relevant account suggestions across affiliated domains.
- Cross-Platform Identity Integration - Associates native application identifiers with web domains to enable credential sharing across platforms.
- Domain Association Services - Associates native application identifiers with web domains to suggest matching credentials for apps.
- Credential Behavior Maps - Provides a comprehensive registry of website authentication quirks and domain-sharing rules to optimize password manager autofill.
- Domain-Shared Credentials - Clusters affiliated domains that share a single set of user credentials for unified account suggestions.
- Web-App Credential Sharing - Links native application identifiers with web domains to enable seamless credential sharing between apps and browsers.
- Complexity Requirement Lookups - Maps domains to specific password complexity and character requirements to ensure generated passwords are compatible.
- Policy-Aware Generators - Ensures generated passwords meet specific website complexity and character requirements using a rule database.
- Static Data Distributions - Provides a centralized collection of static data files for password managers to synchronize site behaviors.
- Password Complexity Parsers - Converts human-readable password rule strings into machine-readable formats for application runtimes.
- Web Auth Behavior Handling - Manages non-standard website behaviors, such as two-factor code appending, to prevent autofill errors.
- Complexity Rule Parsers - Implements a rule parser that converts human-readable password complexity requirements into machine-readable formats.
- Password Manager Resource Maps - Ships a curated collection of browser extension store mappings and account security page URLs.
- Third-Party Frame Detectors - Identifies third-party frames that request external credentials to prevent incorrect password saving.
- Credential Request Detectors - Identifies domains that request credentials for other services when embedded as third-party frames.
- 2FA Appending Detection - Identifies websites that require two-factor codes to be appended to passwords to prevent accidental auto-submission.
- Security Page Localizations - Maps domains to their specific password reset or change URLs to facilitate direct navigation to security settings.
- Rule Parsers - Converts human-readable password complexity requirements into machine-readable formats using JavaScript or Rust.
- Password and MFA Management - Collects password rules and site-specific quirks for password managers.
