Enable Brave Browser to be an AutoFill Provider

[kylehickinson]

Add the ability for Brave to be an password manager in a sense, where as the users stored passwords will then be accessible from the iOS keyboard in WKWebView

This involves adding a new target to the project AutoFill Credential Provider.

More information about the APIs can be found by watching the WWDC 2018 721 - Implementing AutoFill Credential Provider Extensions or reading the AuthenticationServices doc

• Add an AutoFill Credential Provider
• Use Chromium implementation for handling password <> AuthenticationServices sync
• Potentially have new UI for the AuthenticationServices API

Potential caveats to take into account:

• The user has to explicitly enable it in Settings > Passwords & Accounts > AutoFill Passwords
• The user can only have 2 (+ iCloud?) AutoFill providers enabled
• The user has to do this process manually via the keyboard unlike in 1.6 where the username/password were auto-filled upon loading the page.

Screenshots of AutoFill Providers (1Password in this case):

Enabling AutoFill Providers	Single AutoFill	Single Auto-Fill 2

Multiple Logins (Tapping the 🔑)	Tapping "1Password…" UI

[Jacalz]

This would be absolutely awesome, plus one from me 👌

[anthonypkeane]

@kylehickinson - we should implement this natively as Apple intended for iOS12.

When estimating, if it will be >13 story points let me know and we can discuss.

[kylehickinson]

@anthonypkeane It may be more than 13 story points but we'll need to get some questions answered before we can implement it. It's likely that This ticket becomes an Epic and we make smaller tickets for each part.

Some product questions:

1. Are we going to let users manage their logins?

   Currently in 1.6 we do not have any UI to show a list of the users logins. To make Brave an AutoFill provider, we will need UI to show if the user selects Brave (see Multiple Logins (Tapping the 🔑) above) where they can search logins.

2. Will they be able to save more than one login for a specific site?

   Currently in 1.6 we do not allow saving of multiple logins for 1 domain. When you save a login with new credentials it just overwrites the previous credentials for that domain.

3. Are we going to force/couple browser lock with password fill?

   A good way to explain this is 1Password. If you select something from the quick bar, iOS will present 1Password's unlock UI if you have not unlocked 1Password since a reboot, past a certain time limit, etc. Otherwise iOS will simply show a face-ID unlock to fill the password.

   However, if you click the 🔑 icon and select password, it will then bring up 1Password's own UI for authentication (which may be your master password or Face ID/Touch ID)

   Maybe it'd be better to loop in someone from security for this question.

4. Are we going to have user instruction anywhere on how to set this up?

   As I mentioned in the original post "The user has to explicitly enable it in Settings > Passwords & Accounts > AutoFill Passwords". Since there's no special auto-fill that can be enabled for the AutoFill Provider itself (unlike Content Blockers which can be attached directly to the WKWebView)

   If we are going to have user instruction, we'll need copy, a flow and UI to go along with it.

[pk27734]

Will migrate from Firefox to Brave once this is implemented!

[aaronsantamaria]

+1
https://community.brave.com/t/autofill-passwords-integration-in-ios-missing/182859/2

[Mennaruuk]

This holds me back from using Brave on iOS.