1745490 - Secure Code AutoFill (copying OTP codes from text messages) works in Safari on macOS, but not Firefox

Status: NEW

(Toolkit :: Form Autofill, enhancement, P3)

Description

[Chris Peterson [:cpeterson]]

Attachment: Safari_OTP_screenshot.png

Secure Code AutoFill works in both Safari and Firefox on iOS, presumably because they both use WebKit.

How to Use Secure Code AutoFill in iOS 12 and macOS Mojave:
https://www.macrumors.com/how-to/use-secure-code-autofill-ios-12-macos-mojave/

Steps to reproduce:

1. To use Secure Code AutoFill in Safari on macOS, you must first enable Secure Text Message Forwarding on your iPhone or iPad: https://www.macrumors.com/how-to/send-receive-sms-messages-ipad-mac-forwarding/
2. Using a private window (to force OTP authentication) in Safari on macOS >= 10.14 (Mojave).
3. Log into a website that uses 2FA, such as Facebook, Instagram, or eBay.
4. If Secure Text Message Forwarding is enabled on your iPhone or iPad, you should see a notification popup on your Mac about receiving a text message with your OTP code.
5. Click focus into the website's OTP code input field.

Expected result

Safari will show a popup below the input field offering to fill in the OTP code. See the attached screenshot of logging into Instagram.

Actual result

If you follow the STR in Firefox or Chrome (96), there is no popup below the input field offering to fill in the OTP code.