506 Ensuring Continuity Between Your App and Web Site

260
© 2014 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple. #WWDC14 Your App, Your Website, and Safari Ensuring continuity of user experience Session 506 Ricky Mondello Safari and WebKit Engineer Media

TAGS:

description

web

Transcript of 506 Ensuring Continuity Between Your App and Web Site

  • 2014 Apple Inc. All rights reserved. Redistribution or public display not permitted without written permission from Apple.

    #WWDC14

    Your App, Your Website, and SafariEnsuring continuity of user experience

    Session 506 Ricky Mondello Safari and WebKit Engineer

    Media

  • Continuity

  • Continuity |kntn(y)oot| noun (pl. continuities) the unbroken and consistent existence oroperation of something over a period of time

    Continuity

  • Continuity |kntn(y)oot| noun (pl. continuities) the unbroken and consistent existence oroperation of something over a period of time

  • Handoff

  • Related Sessions

    Adopting Handoff on iOS and OS X Mission Wednesday 2:00PM

  • What You Will Learn

    How to: Use Safari credentials in your iOS apps

    Make Safari AutoFill work better on your website

    Help Safari promote your website

    Make your website consistent across devices

  • Credentials in SafariAnd how your app can use them

  • Safari AutoFill

  • Safari AutoFill

  • Safari AutoFill

  • iPad iPhone

    Safari AutoFill

  • Credentials in Safari

    iPad iPhone

    Mac

  • Credentials in Safari

    iPad iPhone

    Mac

  • Credentials in Safari

    iPad iPhone

    Mac

  • iPad iPhone

    Mac

    Credentials in Safari

    iPhone

  • iPad iPhone

    Mac

    Credentials in Safari

    iPhone

  • Credentials in Safari

  • Credentials in Safari

  • Safari Credentials in Native Apps

    Andrew Whalley Core OS Security Engineering

  • Password Security

  • Password Security

  • Password Security

  • Password Security

    afz-zma-9JX-puLandrew

  • Overview

  • Overview

    Associate your app and website

  • Overview

    Associate your app and website One file on your website

  • Overview

    Associate your app and website One file on your website

    One new entitlement

  • Overview

    Associate your app and website One file on your website

    One new entitlement

    Simple APIs

  • Overview

    Associate your app and website One file on your website

    One new entitlement

    Simple APIs Ask for credentials

  • Overview

    Associate your app and website One file on your website

    One new entitlement

    Simple APIs Ask for credentials

    Create or update credentials

  • Associating App and Website

  • Associating App and Website

  • Associating App and Website

  • Associating App and Website

  • Associating App and Website

    App Website Status

    Shiny App example.com Pending

    Foo Client foo.com Approved

    Foo Admin App foo.com Approved

  • example.com

    Shiny App

    Associating App and Website

    example.com

  • example.com

    Shiny App

    Associating App and Website

    example.com

  • Associating App and Website

    Shiny App example.com

    https://example.com/apple-app-site-association

  • Associating App and Website

    Shiny App example.com

    https://example.com/apple-app-site-association

  • Associating App and Website

    Shiny App example.com

    https://example.com/apple-app-site-association

  • Associating App and Website

    Shiny App example.com

    https://

  • example.com

    Associating App and Website

    Shiny App

  • example.com

    Associating App and Website

    Shiny App

    Shiny App

  • Associating App and Website

    example.comShiny App

    Shiny App

  • Associating App and Website

    example.comShiny App

    Shiny App Shiny App

  • App Website Status

    Pending

    Foo Client foo.com Approved

    Foo Admin App foo.com Approved

    Associating App and Website

    Shiny App example.com

  • App Website Status

    Pending

    Foo Client foo.com Approved

    Foo Admin App foo.com Approved

    Associating App and Website

    Shiny App example.comShiny App example.com

  • Associating App and Website

    App Website Status

    Approved

    Foo Client foo.com Approved

    Foo Admin App foo.com Approved

    Shiny App example.com

  • Determining App IntentEntitlements

  • Determining App IntentEntitlements

    application-identifier

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

    com.apple.developer.associated-domains

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

    com.apple.developer.associated-domains

    service:fully.qualified.domain.name[:port number]

  • Determining App IntentEntitlements

    application-identifier

    teamid.bundle-identifier

    YWBN8XTPBJ.com.example.Shiny

    com.apple.developer.associated-domains

    service:fully.qualified.domain.name[:port number]

    webcredentials:example.com

  • associated-domains EntitlementXcode

  • Associating App and Website

  • Associating App and Website

  • d75a94362690a3386d55ef16f95182eb5a334efabcf3f803cecb930d559f397e6966c1996f24aeea8574fe7d209166d1022ea2c2df3de47d734a3c7513047d7b1a5812ae845feb69327921c7fdc4eedd10283939dd729790203010001a38201ab308201a7301f0603551d230418301680146b693d6a18424add8f026539fd35248678911630300e0603551d0f0101ff0404030205a0301d0603551d250416301406082b0601050507030106082b06010505070302301b0603551d1104143012821063727970746f71756f7465732e6e657430430603551d1f043c303a3038a036a0348632687474703a2f2f726170696473736c2d63726c2e67656f74727573742e636f6d2f63726c732f726170696473736c2e63726c301d0603551d0e041604142de1c9ff521bc3210a260fedaf7745837112d27a300c0603551d130101ff04023000307806082b06010505070101046c306a302d06082b060105050730018621687474703a2f2f726170696473736c2d6f6373702e67656f74727573742e636f6d303906082b06010505073002862d687474703a2f2f726170696473736c2d6169612e67656f

    Determining Website Intent

    https://example.com/apple-app-site-association

  • http://example.com/apple-app-site-association !

    !

    { "webcredentials": { "apps": [ "YWBN8XTPBJ.com.example.Shiny", "YWBN8XTPBJ.com.example.ShinyUploader" ] } }

    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

    Determining Website Intent

    https://example.com/apple-app-site-association

  • http://example.com/apple-app-site-association !

    !

    { "webcredentials": { "apps": [ "YWBN8XTPBJ.com.example.Shiny", "YWBN8XTPBJ.com.example.ShinyUploader" ] } }

    Determining Website Intent

    https://example.com/apple-app-site-association

  • Determining Website Intent

    https://example.com/apple-app-site-association !

    !

    { "webcredentials": { "apps": [ "YWBN8XTPBJ.com.example.Shiny", "YWBN8XTPBJ.com.example.ShinyUploader" ] } }

  • Determining Website Intent

    https://example.com/apple-app-site-association !

    !

    { "webcredentials": { "apps": [ "YWBN8XTPBJ.com.example.Shiny", "YWBN8XTPBJ.com.example.ShinyUploader" ] } }

  • Determining Website Intent

    Content-Type must be application/pkcs7-mime

    Signed Cryptographic Message Syntax

    S/MIME

  • apple-app-site-association FileSigning the JSON

  • apple-app-site-association FileSigning the JSON

    echo '{"webcredentials":{"apps":["YWBN8XTPBJ.com.example.Shiny", "YWBN8XTPBJ.com.example.ShinyUploader"]}}' > json.txt

  • apple-app-site-association FileSigning the JSON

    echo '{"webcredentials":{"apps":["YWBN8XTPBJ.com.example.Shiny", "YWBN8XTPBJ.com.example.ShinyUploader"]}}' > json.txt

  • apple-app-site-association FileSigning the JSON

    !

    !

    cat json.txt | openssl smime -sign -inkey example.com.key -signer example.com.pem -certfile intermediate.pem -noattr -nodetach -outform DER > apple-app-site-association

  • apple-app-site-association FileSigning the JSON

    !

    !

    cat json.txt | openssl smime -sign -inkey example.com.key -signer example.com.pem -certfile intermediate.pem -noattr -nodetach -outform DER > apple-app-site-association

  • apple-app-site-association FileSigning the JSON

    !

    !

    cat json.txt | openssl smime -sign -inkey example.com.key -signer example.com.pem -certfile intermediate.pem -noattr -nodetach -outform DER > apple-app-site-association

  • apple-app-site-association FileSigning the JSON

    !

    !

    cat json.txt | openssl smime -sign -inkey example.com.key -signer example.com.pem -certfile intermediate.pem -noattr -nodetach -outform DER > apple-app-site-association

  • Associating App and Website

  • HTTP Status Service andIdentifier Match Signature Is Valid Approval State

    200 Approved

    200 Denied

    300-499 n/a n/a Denied

    500-599 n/a n/a Retry

    Determining Website IntentReturn results

  • HTTP Status Service andIdentifier Match Signature Is Valid Approval State

    200 Approved

    200 Denied

    300-499 n/a n/a Denied

    500-599 n/a n/a Retry

    Determining Website IntentReturn results

  • HTTP Status Service andIdentifier Match Signature Is Valid Approval State

    200 Approved

    200 Denied

    300-499 n/a n/a Denied

    500-599 n/a n/a Retry

    Determining Website IntentReturn results

  • HTTP Status Service andIdentifier Match Signature Is Valid Approval State

    200 Approved

    200 Denied

    300-499 n/a n/a Denied

    500-599 n/a n/a Retry

    Determining Website IntentReturn results

  • HTTP Status Service andIdentifier Match Signature Is Valid Approval State

    200 Approved

    200 Denied

    300-499 n/a n/a Denied

    500-599 n/a n/a Retry

    Determining Website IntentReturn results

  • HTTP Status Service andIdentifier Match Signature Is Valid Approval State

    200 Approved

    200 Denied

    300-499 n/a n/a Denied

    500-599 n/a n/a Retry

    Determining Website IntentReturn results

  • Native Apps with Accounts

  • Native Apps with Accounts

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check for Saved Credentials

    Check Safari for Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check Safari for Credentials

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check Safari for Credentials

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check Safari for Credentials

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Prompt User

    Check Safari for Credentials

    Check for Saved Credentials

  • Native Apps with Accounts

    Log In

    Save Credentials

    Check Safari for Credentials

    Check for Saved Credentials

    Prompt User

  • New APIs

  • New APIs

    SecRequestSharedWebCredential

    SecAddSharedWebCredential

    SecCreateSharedWebCredentialPassword

  • New APIs

    SecRequestSharedWebCredential

    SecAddSharedWebCredential

    SecCreateSharedWebCredentialPassword

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(CFSTR("example.com"), CFSTR("[email protected]"), ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(CFSTR("example.com"), CFSTR("[email protected]"), ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(CFSTR("example.com"), CFSTR("[email protected]"), ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(CFSTR("example.com"), CFSTR("[email protected]"), ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, NULL, ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { ! });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { ! });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential NULL, ! });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { ! });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { ! });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { ! });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Obtaining Safari Credentials

    SecRequestSharedWebCredential(NULL, // use domains from entitlement NULL, // find all matching usernames ^(CFArrayRef credentials, CFErrorRef error) { if (!error && CFArrayGetCount(credentials)) { CFDictionaryRef credential = CFArrayGetValueAtIndex(credentials, 0); NSString *username = CFDictionaryGetValue(credential, kSecAttrAccount); NSString *password = CFDictionaryGetValue(credential, kSecSharedPassword); dispatch_async(dispatch_get_main_queue(), ^{ [serverManager attemptLoginWithUsername:username password:password]; }); } else { dispatch_async(dispatch_get_main_queue(), ^{ [self showLoginUI]; }); } });

  • Telling Safari About Credentials

  • Telling Safari About Credentials

    SecAddSharedWebCredential(CFSTR("example.com"), username, password, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About Credentials

    SecAddSharedWebCredential(CFSTR("example.com"), username, password, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About Credentials

    SecAddSharedWebCredential(CFSTR("example.com"), username, password, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About Credentials

    SecAddSharedWebCredential(CFSTR("example.com"), username, password, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About Credentials

    SecAddSharedWebCredential(CFSTR("example.com"), username, password, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About Credentials

    SecAddSharedWebCredential(CFSTR("example.com"), username, password, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About CredentialsUpdating a CredentialSecAddSharedWebCredential(CFSTR("example.com"), username, newPassword, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About CredentialsUpdating a CredentialSecAddSharedWebCredential(CFSTR("example.com"), username, newPassword, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About CredentialsDeleting a CredentialSecAddSharedWebCredential(CFSTR("example.com"), username, NULL, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Telling Safari About CredentialsDeleting a CredentialSecAddSharedWebCredential(CFSTR("example.com"), username, NULL, ^(CFErrorRef error) { NSLog(@"%@", error); });

  • Generating a Password

    CFStringRef suggestedPwd = SecCreateSharedWebCredentialPassword();

  • Generating a Password

    CFStringRef suggestedPwd = SecCreateSharedWebCredentialPassword();

    JVA-9cx-ZfT-c4Hk6S-kgS-c7E-hhK2H4-mVC-dx3-Vbv9uB-VC9-52L-9H5meR-7CK-d3B-em9mMJ-8LN-Wf4-Jsbwu4-PGe-gEQ-xTE645-3bY-7CG-3mn5B8-T8E-rRG-EtBESB-naN-PrF-s3rwN4-NUq-dHB-oU9Z7k-n3r-nqB-oNPT6h-JtS-e5L-UUfJJz-Yar-BXt-KY4

  • Error Conditions

    Condition CFErrorGetCode() CFErrorCopyDescription()

    Missing entitlement errSecParam "No domain provided

    Missing entitlement errSecMissingEntitlement"example.com not found in

    com.apple.developer.associated-domains entitlement"

    Domain not approved errSecItemNotFound "no matching items found"

    No saved credentials errSecItemNotFound "no matching items found"

  • Error Conditions

    Condition CFErrorGetCode() CFErrorCopyDescription()

    Missing entitlement errSecParam "No domain provided

    Missing entitlement errSecMissingEntitlement"example.com not found in

    com.apple.developer.associated-domains entitlement"

    Domain not approved errSecItemNotFound "no matching items found"

    No saved credentials errSecItemNotFound "no matching items found"

  • Error Conditions

    Condition CFErrorGetCode() CFErrorCopyDescription()

    Missing entitlement errSecParam "No domain provided

    Missing entitlement errSecMissingEntitlement"example.com not found in

    com.apple.developer.associated-domains entitlement"

    Domain not approved errSecItemNotFound "no matching items found"

    No saved credentials errSecItemNotFound "no matching items found"

  • Error Conditions

    Condition CFErrorGetCode() CFErrorCopyDescription()

    Missing entitlement errSecParam "No domain provided

    Missing entitlement errSecMissingEntitlement"example.com not found in

    com.apple.developer.associated-domains entitlement"

    Domain not approved errSecItemNotFound "no matching items found"

    No saved credentials errSecItemNotFound "no matching items found"

  • Error Conditions

    Condition CFErrorGetCode() CFErrorCopyDescription()

    Missing entitlement errSecParam "No domain provided

    Missing entitlement errSecMissingEntitlement"example.com not found in

    com.apple.developer.associated-domains entitlement"

    Domain not approved errSecItemNotFound "no matching items found"

    No saved credentials errSecItemNotFound "no matching items found"

  • Error Conditions

    Condition CFErrorGetCode() CFErrorCopyDescription()

    Missing entitlement errSecParam "No domain provided

    Missing entitlement errSecMissingEntitlement"example.com not found in

    com.apple.developer.associated-domains entitlement"

    Domain not approved errSecItemNotFound "no matching items found"

    No saved credentials errSecItemNotFound "no matching items found"

  • DemoPutting it into practice

  • Safari Credentials in Native Apps

    iPad iPhone

    Mac

    iPhone

  • Safari Credentials in Native Apps

    iPad iPhone

    Mac

    iPhone

  • Credentials on the Web

    Ricky Mondello Safari and WebKit Engineer

  • Expressing Intent

  • Expressing Intent on the Web

  • The Password Lifecycle

    No Account

    Logged Out

    Logged In Change PasswordCreated Account

  • Test Your Website with Safari AutoFill

  • Testing Your Site and Safari AutoFillThe password lifecycle

    No Account Logged In Change PasswordCreated Account

    Logged Out

  • Testing Your Site and Safari AutoFillCreating an account

    No Account Logged In Change PasswordCreated Account

    Logged Out

  • Testing Your Site and Safari AutoFillCreating an account

    No Account Logged In Change PasswordCreated AccountCreated Account

    Logged Out

  • Testing Your Site and Safari AutoFillLogging in with saved credentials

    No Account Logged In Change PasswordCreated Account

    Logged Out

  • Testing Your Site and Safari AutoFillLogging in with saved credentials

    No Account Logged In Change PasswordCreated Account

    Logged OutLogged Out

    Logged In

  • Testing Your Site and Safari AutoFillChanging a password

    No Account Logged In Change PasswordCreated Account

    Logged OutLogged Out

    Logged In

  • Testing Your Site and Safari AutoFillChanging a password

    No Account Logged In Change PasswordCreated Account

    Logged OutLogged Out

    Logged In Change PasswordLogged In

  • Logged Out

    Testing Your Site and Safari AutoFillResetting a password

    No Account Logged In Change PasswordCreated Account

  • Logged OutLogged Out

    Testing Your Site and Safari AutoFillResetting a password

    No Account Logged In Change PasswordCreated Account

    Change Password

  • Testing Your Site and Safari AutoFillLogging in for the first time

    No Account Logged In Change PasswordCreated Account

    Logged Out

  • Testing Your Site and Safari AutoFillLogging in for the first time

    No Account Logged In Change PasswordCreated Account

    Logged OutLogged Out

    Logged In

  • Testing Your Site and Safari AutoFillWhat to do if something doesnt work

    No Account Logged In Change PasswordCreated Account

    Logged Out

  • Your Forms Intent

  • Your Forms Intent

    !

    !

    New values for the autocomplete attribute

  • !

    !

    !

    Logging in

    Log in

    Username

    Password

  • !

    !

    !

    Signing up

    Sign up

    Username

    Password

  • !

    !

    !

    !

    Signing upWith confirmation

    Sign up

    Username

    Password

    Confirm Password

  • !

    !

    !

    !

    Changing Ones PasswordWhile logged in

    Change Password

    Username

    Current Password

    New Password

    rmondello

  • Changing Ones PasswordWhile logged in

    !

    !

    !

    !

    Change Password

    Username

    Current Password

    New Password

    rmondello

  • Change Password

    Changing Ones PasswordWhile logged in

    Current Password

    New Password

    !

    !

    !

    !

  • !

    !

    !

    Changing Ones PasswordAfter forgetting the password

    Change Password

    Username

    Password

    rmondello

  • Your Forms IntentThe autocomplete attribute

    username current-password new-password name-full given-name middle-name family-name birthday-year birthday-month birthday-day

    email street-address city state province postal-code country phone phone-area-code organization

  • Testing Your Site and Safari AutoFill

    No Account Logged In Change PasswordCreated Account

    Logged Out

  • Declaring a State TransitionHistory API

    history.pushState !

    history.replaceState

  • Declaring a State TransitionHistory API

    history.pushState(data, null, "page.html"); !

    history.replaceState(data, null, "page.html");

  • iCloud

  • iCloud

    iCloud Mail

  • iCloud

    iCloud Calendar

    iCloud Mail

  • iCloud

    iCloud Calendar

    Twitter

    iCloud Mail

  • iCloud

    iCloud Calendar

    Twitter

    iCloud Mail

    A User Profile

  • iCloud

    iCloud Calendar

    Twitter

    A User Profile

    A Tweet

    iCloud Mail

  • Declaring a State TransitionHistory API

    Home

    Profile

    AccountSettings

  • Declaring a State Transition

    history.pushState({ data: "yourData" }, null);

    History API

    Home

    Profile

    Account Settings

    Password Updated

  • iPad

    Mac

    iPhone

  • iPad

    Mac

    iPhone

  • Safari and Your Websites ContentIconography and metadata

  • Iconography

    In-page markup: !

    Standard path: /favicon.ico

    Favicon

  • Iconography

    Used on iOS home screen

    In-page markup:

    See Configuring Web Applications on the Safari Web Content Guide

    Apple Touch Icon

  • Apple Touch Icon

  • IconographyApple Touch Icon

  • IconographyApple Touch Icon

  • Iconography

  • Reading List

  • Safari Reader

  • Shared Links

  • Your Site in Shared Links

  • Your Site in Shared Links

  • Surfin' Safari Introducing the WebKit FTL JIT https://www.webkit.org/blog/3362/introducing-the-webkit-ftl-jit/ Tue, 13 May 2014 02:52:42 GMT Just a decade ago]]>

    Your Site in Shared Links

  • Your Site in Shared Links

  • Reading List

  • Reading List

    @import SafariServices; !

    NSURL *URL = [NSURL URLWithString:@"https://webkit.org/blog/"]; !

    [[SSReadingList defaultReadingList] addReadingListItemWithURL:URL title:@"Introducing the WebKit FTL JIT" previewText:@"Just a decade ago, JavaScript the programming language" error:NULL];

    Adding from your iOS app

  • Expressing Intent on the Web

  • Surfin' Safari - Archive Introducing the WebKit FTL JIT

    Reading ListBetter titles and descriptions through metadata

  • Surfin' Safari - Archive Introducing the WebKit FTL JIT !

    Reading ListBetter titles and descriptions through metadata

  • Surfin' Safari - Archive Introducing the WebKit FTL JIT !

    Reading ListBetter titles and descriptions through metadata

  • Reading ListBetter titles and descriptions through metadata

  • Metadata Standards

    OpenGraphhttp://ogp.me The Dublin Core Metadata Initiativehttp://dublincore.org schema.orghttp://schema.org

    Resources

  • The Sticky Mobile Website

  • The Sticky Mobile Website

  • The Sticky Mobile Website

  • The Sticky Mobile Website

  • The Sticky Mobile Website

  • The Sticky Mobile Website

    m.example.com/articles/lorem

  • The Sticky Mobile Website

  • The Sticky Mobile Website

    GET example.com/example.com

    Desktop Layout

    Mobile Layout

    m.example.com

  • The Sticky Mobile Website

    GET m.example.com/

    GET example.com/example.com

    Desktop Layout

    Mobile Layout

    m.example.com

  • The Sticky Mobile WebsiteRelevant to Handoff

  • The Sticky Mobile Website

    GET m.example.com/

    GET example.com/example.com

    Desktop Layout

    Mobile Layout

    m.example.com

  • The Sticky Mobile Website

    GET m.example.com/

    GET example.com/example.com

    Desktop Layout

    Mobile Layout

    m.example.com

  • Responsive DesignOne site for everyone

    GET example.com/

    example.com

    Responsive Layout

    GET example.com/

  • Responsive DesignOne site for everyone

  • Related Sessions

    Designing Responsive Web Experiences Marina Friday 10:15AM

  • Related Sessions

    Advanced Media for the Web Nob Hill Tuesday 11:30AM

  • Continuity |kntn(y)oot| noun (pl. continuities) the unbroken and consistent existence oroperation of something over a period of time

  • Summary

    Use Safari credentials in your apps

    Test Safari AutoFill with your website

    Use the autocomplete attribute

    Deploy high-quality website icons

    Express intent with metadata

    Unify mobile and desktop websites

  • More Information

    Evangelism [email protected]

    !

    Developer Technical Support http://developer.apple.com/contact

    Apple Developer Forums http://devforums.apple.com

  • Related Sessions

    Advanced Media for the Web Nob Hill Tuesday 11:30AM Keychain and Authentication with Touch ID Nob Hill Wednesday 10:15AM Adopting Handoff on iOS and OS X Mission Wednesday 2:00 PM Designing Responsive Web Experiences Marina Friday 10:15AM

  • Labs

    Security Lab Core OS Lab B Wednesday 11:30AM Safari and WebKit Lab Media Lab B Wednesday 4:30PM Safari and WebKit Lab Media Lab B Thursday 2:00PM Security and Privacy Lab Core OS Lab B Thursday 3:15PM


Ensuring Continuity and Shopper Safety

Ensuring Continuity and Shopper Safety

Visteon Case Study: Ensuring Business Continuity with … · Visteon Case Study: Ensuring Business Continuity with QAD Applications 1 ... Ensuring Business Continuity with QAD Applications

Visteon Case Study: Ensuring Business Continuity with … · Visteon Case Study: Ensuring Business Continuity with QAD Applications 1 ... Ensuring Business Continuity with QAD Applications

Ensuring the Integrity (& Continuity) of Our Record of Scholarship

Ensuring the Integrity (& Continuity) of Our Record of Scholarship

Instructional Continuity · Instructional Continuity LA Unified is committed to ensuring the health and well-being of students and staff and providing a safe, secure learning environment

Instructional Continuity · Instructional Continuity LA Unified is committed to ensuring the health and well-being of students and staff and providing a safe, secure learning environment

Disaster Recovery and Business Continuity Ensuring Member Service in Times of Crisis.

Disaster Recovery and Business Continuity Ensuring Member Service in Times of Crisis.

Ensuring Continuity of Access To Our Published Heritage

Ensuring Continuity of Access To Our Published Heritage

Ensuring Educational Stability, Continuity, & Success of Children in Foster Care

Ensuring Educational Stability, Continuity, & Success of Children in Foster Care

Ensuring Business Continuity for Virtualization

Ensuring Business Continuity for Virtualization

ENSURING RESILIENCY: CONTINUITY PLANNING FOR … · Business Continuity Emergency Management •Respond to the incident Business Continuity •Maintain essential functions •Restore

ENSURING RESILIENCY: CONTINUITY PLANNING FOR … · Business Continuity Emergency Management •Respond to the incident Business Continuity •Maintain essential functions •Restore

Passing the Torch: Ensuring the Continuity of Your Work · Passing the Torch: Ensuring the Continuity of Your Work To join the audio portion, please dial: 1-888-455-7576 Passcode:

Passing the Torch: Ensuring the Continuity of Your Work · Passing the Torch: Ensuring the Continuity of Your Work To join the audio portion, please dial: 1-888-455-7576 Passcode:

Ensuring Operational Survival After a Disaster Business Continuity Planning for Nonprofits

Ensuring Operational Survival After a Disaster Business Continuity Planning for Nonprofits

Virtual Meetings Increasing Collaboration While Reducing Costs and Ensuring Business Continuity

Virtual Meetings Increasing Collaboration While Reducing Costs and Ensuring Business Continuity

Ensuring Business Continuity in Government€¦ · White Paper Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408.745.2000 1.888 JUNIPER Ensuring

Ensuring Business Continuity in Government€¦ · White Paper Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408.745.2000 1.888 JUNIPER Ensuring

Your App, Your Website, and Safari · Your App, Your Website, and Safari Ensuring continuity of user experience Session 506 Ricky Mondello Safari and WebKit Engineer Media. ... And

Your App, Your Website, and Safari · Your App, Your Website, and Safari Ensuring continuity of user experience Session 506 Ricky Mondello Safari and WebKit Engineer Media. ... And

COOP and Contingency Plans. Introduction to Emergency Preparedness Various processes are involved in ensuring business continuity. Listed below are some.

COOP and Contingency Plans. Introduction to Emergency Preparedness Various processes are involved in ensuring business continuity. Listed below are some.

Ensuring Mission-Critical System Continuity€¦ · ・Virtual IP addresses for use during routing are supported. Business continuity Virtualization technology is effective for server

Ensuring Mission-Critical System Continuity€¦ · ・Virtual IP addresses for use during routing are supported. Business continuity Virtualization technology is effective for server

Virtual Meetings Increasing Collaboration While Reducing Costs and Ensuring Business Continuity Ram Narayanaswamy CTO 8x8, Inc.

Virtual Meetings Increasing Collaboration While Reducing Costs and Ensuring Business Continuity Ram Narayanaswamy CTO 8x8, Inc.

Business Continuity - IT Best of Breedi.crn.com/custom/Carbonite_BusinessContinuity... · ensuring business continuity.1 However, business continuity is about more than dealing ...

Business Continuity - IT Best of Breedi.crn.com/custom/Carbonite_BusinessContinuity... · ensuring business continuity.1 However, business continuity is about more than dealing ...

Health Network Ensuring continuity of care through bridge case management A force for health justice for the mobile poor.

Health Network Ensuring continuity of care through bridge case management A force for health justice for the mobile poor.

PECAN Phase 2: Pilot for Ensuring Continuity of Access via Nesli2

PECAN Phase 2: Pilot for Ensuring Continuity of Access via Nesli2