apple/password-manager-resources
Password Manager Resources
Ce projet est une base de connaissances et une collection de ressources statiques pour le développement de gestionnaires de mots de passe. Il fournit un dépôt centralisé de données et de règles utilisées pour identifier les comportements des identifiants de sites web et les exigences de complexité des mots de passe.
L'ensemble de ressources inclut un mappage des identifiants d'applications natives vers les domaines web pour faciliter le partage d'identifiants et un registre des particularités des sites web pour gérer les flux d'authentification non standard. Il contient également un système pour regrouper les domaines affiliés qui partagent des identifiants afin d'améliorer la précision des suggestions de compte.
Le projet couvre un large éventail de capacités de gestion des identifiants, notamment la localisation des pages de changement de mot de passe, la détection des demandes d'identifiants tierces et l'identification des sites qui nécessitent que des codes à deux facteurs soient ajoutés aux mots de passe. Il inclut également un analyseur de règles qui convertit les exigences de complexité des mots de passe lisibles par l'humain en formats lisibles par machine et des mappages qui connectent les navigateurs web à leurs magasins d'extensions respectifs.
Features
- Password Management - Provides a knowledge base of website behaviors and password requirements for password manager development.
- Knowledge Bases - Acts as a centralized knowledge base of website credential behaviors and password complexity requirements for password manager developers.
- Credential Behavior Quirks - Maps specific web domains to non-standard credential behaviors to ensure correct password manager handling.
- Autofill Integrations - Improves login suggestions by mapping shared domains and linking native application IDs to web accounts.
- Shared Web Credentials - Groups websites that share a single set of credentials to provide relevant account suggestions across affiliated domains.
- Cross-Platform Identity Integration - Associates native application identifiers with web domains to enable credential sharing across platforms.
- Domain Association Services - Associates native application identifiers with web domains to suggest matching credentials for apps.
- Credential Behavior Maps - Provides a comprehensive registry of website authentication quirks and domain-sharing rules to optimize password manager autofill.
- Domain-Shared Credentials - Clusters affiliated domains that share a single set of user credentials for unified account suggestions.
- Web-App Credential Sharing - Links native application identifiers with web domains to enable seamless credential sharing between apps and browsers.
- Complexity Requirement Lookups - Maps domains to specific password complexity and character requirements to ensure generated passwords are compatible.
- Policy-Aware Generators - Ensures generated passwords meet specific website complexity and character requirements using a rule database.
- Static Data Distributions - Provides a centralized collection of static data files for password managers to synchronize site behaviors.
- Password Complexity Parsers - Converts human-readable password rule strings into machine-readable formats for application runtimes.
- Web Auth Behavior Handling - Manages non-standard website behaviors, such as two-factor code appending, to prevent autofill errors.
- Complexity Rule Parsers - Implements a rule parser that converts human-readable password complexity requirements into machine-readable formats.
- Password Manager Resource Maps - Ships a curated collection of browser extension store mappings and account security page URLs.
- Third-Party Frame Detectors - Identifies third-party frames that request external credentials to prevent incorrect password saving.
- Credential Request Detectors - Identifies domains that request credentials for other services when embedded as third-party frames.
- 2FA Appending Detection - Identifies websites that require two-factor codes to be appended to passwords to prevent accidental auto-submission.
- Security Page Localizations - Maps domains to their specific password reset or change URLs to facilitate direct navigation to security settings.
- Rule Parsers - Converts human-readable password complexity requirements into machine-readable formats using JavaScript or Rust.
- Password and MFA Management - Collects password rules and site-specific quirks for password managers.
