@capgo/capacitor-autofill-save-password 8.0.35 → 8.1.0

package/README.md

@@ -9,9 +9,7 @@ Prompt to display dialog for saving password to keychain from webview app
   <h2><a href="https://capgo.app/consulting/?ref=plugin_autofill_save_password"> Missing a feature? We’ll build the plugin for you 💪</a></h2>
 </div>
 
-Fork of original plugin to work with Capacitor 7 
-
-IOS work for old versions and 18.3
+Fork of original plugin to work with Capacitor 7+
 
 ## Documentation
 
@@ -104,6 +102,16 @@ with
     </string>
 ```
 
+### iOS
+
+On iOS 26.2 and later, `promptDialog` saves through [`ASCredentialDataManager`](https://developer.apple.com/documentation/authenticationservices/ascredentialdatamanager), which routes the save to whichever credential provider the user has chosen — iCloud Keychain or a third-party manager. Below 26.2 it falls back to `SecAddSharedWebCredential`, which Apple deprecated in 26.2 and which only ever writes to iCloud Keychain.
+
+Either way the `url` option names the domain the credential is saved against, and it must be one of the `webcredentials:` associated domains you set up above.
+
+Note the two paths differ in what they report back. `SecAddSharedWebCredential` surfaces a dismissed prompt as an error, so `promptDialog` rejects. `ASCredentialDataManager` only throws when the system rejects the update — Apple describe it as equivalent to submitting a password form, so the user's choice never reaches the app. On 26.2 and later, treat a resolved promise as "the system accepted the request", not as confirmation that the password was saved.
+
+On 26.2 and later you can also pass `title` to control the name the credential is filed under. Without it the password manager falls back to the bare domain, so users see `app.example.com` rather than your product name. The old API has no equivalent, so `title` is ignored below 26.2.
+
 ## API
 
 <docgen-index>
@@ -126,6 +134,12 @@ promptDialog(options: Options) => Promise<void>
 
 Save a password to the keychain.
 
+On iOS 26.2 and later, resolving means the system accepted the request —
+not that the credential was stored. The save prompt belongs to the system
+and the user's choice is not reported back, so do not treat a resolved
+promise as confirmation. Below 26.2, and on Android, dismissing the prompt
+rejects.
+
 | Param         | Type                                        | Description                     |
 | ------------- | ------------------------------------------- | ------------------------------- |
 | **`options`** | <code><a href="#options">Options</a></code> | - The options for the password. |
@@ -166,11 +180,12 @@ Get the native Capacitor plugin version.
 
 #### Options
 
-| Prop           | Type                | Description                                                                    |
-| -------------- | ------------------- | ------------------------------------------------------------------------------ |
-| **`username`** | <code>string</code> | The username to save.                                                          |
-| **`password`** | <code>string</code> | The password to save.                                                          |
-| **`url`**      | <code>string</code> | The url to save the password for. (For example: "console.capgo.app") iOS only. |
+| Prop           | Type                | Description                                                                                                                                         |
+| -------------- | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **`username`** | <code>string</code> | The username to save.                                                                                                                               |
+| **`password`** | <code>string</code> | The password to save.                                                                                                                               |
+| **`url`**      | <code>string</code> | The url to save the password for. (For example: "console.capgo.app") iOS only.                                                                      |
+| **`title`**    | <code>string</code> | The name the credential is filed under in the password manager. (For example: "Capgo"). Defaults to the domain from `url`. iOS 26.2 and later only. |
 
 
 #### ReadPasswordResult

package/android/src/main/java/ee/forgr/autofill_password/SavePasswordPlugin.java

@@ -28,7 +28,7 @@ import java.util.Map;
 @CapacitorPlugin(name = "SavePassword")
 public class SavePasswordPlugin extends Plugin {
 
-    private final String pluginVersion = "8.0.35";
+    private final String pluginVersion = "8.1.0";
     private static final String TAG = "CredentialManager";
     private CredentialManager credentialManager;
     private Map<String, PendingGetCredentialRequest> pendingRequestsByElementId = new HashMap<>();

package/dist/docs.json

@@ -31,15 +31,14 @@
             "text": "options - The options for the password."
           },
           {
-            "name": "returns",
-            "text": "Success status"
+            "name": "returns"
           },
           {
             "name": "example",
             "text": "await SavePassword.promptDialog({\n  username: 'your-username',\n  password: 'your-password'\n});"
           }
         ],
-        "docs": "Save a password to the keychain.",
+        "docs": "Save a password to the keychain.\n\nOn iOS 26.2 and later, resolving means the system accepted the request —\nnot that the credential was stored. The save prompt belongs to the system\nand the user's choice is not reported back, so do not treat a resolved\npromise as confirmation. Below 26.2, and on Android, dismissing the prompt\nrejects.",
         "complexTypes": [
           "Options"
         ],
@@ -121,6 +120,13 @@
           "docs": "The url to save the password for. (For example: \"console.capgo.app\")\niOS only.",
           "complexTypes": [],
           "type": "string | undefined"
+        },
+        {
+          "name": "title",
+          "tags": [],
+          "docs": "The name the credential is filed under in the password manager.\n(For example: \"Capgo\"). Defaults to the domain from `url`.\niOS 26.2 and later only.",
+          "complexTypes": [],
+          "type": "string | undefined"
         }
       ]
     },

package/dist/esm/definitions.d.ts

@@ -16,6 +16,12 @@ export interface Options {
      * iOS only.
      */
     url?: string;
+    /**
+     * The name the credential is filed under in the password manager.
+     * (For example: "Capgo"). Defaults to the domain from `url`.
+     * iOS 26.2 and later only.
+     */
+    title?: string;
 }
 export interface ReadPasswordResult {
     /**
@@ -34,8 +40,15 @@ export interface ReadPasswordResult {
 export interface SavePasswordPlugin {
     /**
      * Save a password to the keychain.
+     *
+     * On iOS 26.2 and later, resolving means the system accepted the request —
+     * not that the credential was stored. The save prompt belongs to the system
+     * and the user's choice is not reported back, so do not treat a resolved
+     * promise as confirmation. Below 26.2, and on Android, dismissing the prompt
+     * rejects.
+     *
      * @param {Options} options - The options for the password.
-     * @returns {Promise<void>} Success status
+     * @returns {Promise<void>}
      * @example
      * await SavePassword.promptDialog({
      *   username: 'your-username',

package/dist/esm/definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * @interface Options\n * @description The options for the prompt.\n */\nexport interface Options {\n  /**\n   * The username to save.\n   */\n  username: string;\n  /**\n   * The password to save.\n   */\n  password: string;\n  /**\n   * The url to save the password for. (For example: \"console.capgo.app\")\n   * iOS only.\n   */\n  url?: string;\n}\n\nexport interface ReadPasswordResult {\n  /**\n   * The username of the password.\n   */\n  username: string;\n  /**\n   * The password of the password.\n   */\n  password: string;\n}\n\n/**\n * @interface SavePasswordPlugin\n * @description Capacitor plugin for saving passwords to the keychain.\n */\nexport interface SavePasswordPlugin {\n  /**\n   * Save a password to the keychain.\n   * @param {Options} options - The options for the password.\n   * @returns {Promise<void>} Success status\n   * @example\n   * await SavePassword.promptDialog({\n   *   username: 'your-username',\n   *   password: 'your-password'\n   * });\n   */\n  promptDialog(options: Options): Promise<void>;\n\n  /**\n   * Read a password from the keychain. Requires the developer to setup associated domain for the app for iOS.\n   * @returns {Promise<ReadPasswordResult>} The retrieved password credentials\n   */\n  readPassword(): Promise<ReadPasswordResult>;\n\n  /**\n   * Get the native Capacitor plugin version.\n   *\n   * @returns Promise that resolves with the plugin version\n   * @since 1.0.0\n   */\n  getPluginVersion(): Promise<{ version: string }>;\n}\n"]}
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * @interface Options\n * @description The options for the prompt.\n */\nexport interface Options {\n  /**\n   * The username to save.\n   */\n  username: string;\n  /**\n   * The password to save.\n   */\n  password: string;\n  /**\n   * The url to save the password for. (For example: \"console.capgo.app\")\n   * iOS only.\n   */\n  url?: string;\n  /**\n   * The name the credential is filed under in the password manager.\n   * (For example: \"Capgo\"). Defaults to the domain from `url`.\n   * iOS 26.2 and later only.\n   */\n  title?: string;\n}\n\nexport interface ReadPasswordResult {\n  /**\n   * The username of the password.\n   */\n  username: string;\n  /**\n   * The password of the password.\n   */\n  password: string;\n}\n\n/**\n * @interface SavePasswordPlugin\n * @description Capacitor plugin for saving passwords to the keychain.\n */\nexport interface SavePasswordPlugin {\n  /**\n   * Save a password to the keychain.\n   *\n   * On iOS 26.2 and later, resolving means the system accepted the request —\n   * not that the credential was stored. The save prompt belongs to the system\n   * and the user's choice is not reported back, so do not treat a resolved\n   * promise as confirmation. Below 26.2, and on Android, dismissing the prompt\n   * rejects.\n   *\n   * @param {Options} options - The options for the password.\n   * @returns {Promise<void>}\n   * @example\n   * await SavePassword.promptDialog({\n   *   username: 'your-username',\n   *   password: 'your-password'\n   * });\n   */\n  promptDialog(options: Options): Promise<void>;\n\n  /**\n   * Read a password from the keychain. Requires the developer to setup associated domain for the app for iOS.\n   * @returns {Promise<ReadPasswordResult>} The retrieved password credentials\n   */\n  readPassword(): Promise<ReadPasswordResult>;\n\n  /**\n   * Get the native Capacitor plugin version.\n   *\n   * @returns Promise that resolves with the plugin version\n   * @since 1.0.0\n   */\n  getPluginVersion(): Promise<{ version: string }>;\n}\n"]}

package/ios/Sources/SavePasswordPlugin/SavePasswordPlugin.swift

@@ -9,7 +9,7 @@ import AuthenticationServices
  */
 @objc(SavePasswordPlugin)
 public class SavePasswordPlugin: CAPPlugin, CAPBridgedPlugin, ASAuthorizationControllerDelegate, ASAuthorizationControllerPresentationContextProviding {
-    private let pluginVersion: String = "8.0.35"
+    private let pluginVersion: String = "8.1.0"
     public let identifier = "SavePasswordPlugin"
 
     public let jsName = "SavePassword"
@@ -29,6 +29,57 @@ public class SavePasswordPlugin: CAPPlugin, CAPBridgedPlugin, ASAuthorizationCon
             call.reject("URL is required for iOS shared web credentials")
             return
         }
+
+        if #available(iOS 26.2, *) {
+            saveWithCredentialDataManager(
+                call,
+                username: username,
+                password: password,
+                url: url,
+                title: call.getString("title")
+            )
+            return
+        }
+
+        saveWithSharedWebCredential(call, username: username, password: password, url: url)
+    }
+
+    @available(iOS 26.2, *)
+    private func saveWithCredentialDataManager(
+        _ call: CAPPluginCall, username: String, password: String, url: String, title: String?
+    ) {
+        Task { @MainActor in
+            guard let anchor = self.bridge?.viewController?.view.window else {
+                call.reject("Failed to save credential", "No window to present the save prompt from")
+                return
+            }
+            do {
+                try await ASCredentialDataManager().save(
+                    password: ASPasswordCredential(user: username, password: password),
+                    for: Self.autoFillScope(for: url),
+                    title: title,
+                    anchor: anchor
+                )
+                call.resolve()
+            } catch {
+                call.reject("Failed to save credential", error.localizedDescription)
+            }
+        }
+    }
+
+    @available(iOS 26.2, *)
+    private static func autoFillScope(for url: String) -> ASAutoFillURLScope {
+        // `url` is documented as a bare FQDN, but tolerate a full URL rather than
+        // handing "https://example.com" to the host initialiser verbatim
+        guard let parsed = URL(string: url), parsed.scheme != nil,
+              let scope = ASAutoFillURLScope(url: parsed) else {
+            return ASAutoFillURLScope(host: url)
+        }
+        return scope
+    }
+
+    @available(iOS, deprecated: 26.2, message: "Superseded by ASCredentialDataManager")
+    private func saveWithSharedWebCredential(_ call: CAPPluginCall, username: String, password: String, url: String) {
         let fqdn = url as CFString
         let user = username as CFString
         let pass = password as CFString

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capgo/capacitor-autofill-save-password",
-  "version": "8.0.35",
+  "version": "8.1.0",
   "description": "Prompt to display dialog for saving password to keychain from webview app",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",