Autofill credentials in web pages

[sashei]

Acceptance Criteria

When the AutofillService encounters a FillRequest where the top-level ViewNode is a WebView or GeckoView, optimize credential filling to:

• use the domain of the displayed URL in the webpage rather than the app package name
• search for autofill-able views in a web context rather than a native Android app context

Engineering Notes

Documentation

• Autofill Framework root document
• Web Security Documentation
• Filling Notes

Engineering Tasks

• Modify ParsedStructure.kt logic to check for WebViews.
• Use the AssistStructure.ViewNode.getWebDomain() from the WebView node to determine potential credentials
• Update the username and password keywords to include attributes from the wc3 standard and any encountered or relevant characteristics (more in the autofill docs )
• Update the architecture/autofill doc with a plaintext writeup of the heuristics that you used

Gotchas

There's likely a high degree of complexity here in doing the webview parsing; I'd guess more so in browsers & web-optimized pages than mobile apps that use WebViews for authentication like we do in Lockbox.