Auto-form fill based website authentication
A method for a website authentication is provided. The method includes receiving a reference uniform resource locator (URL) at a browser and determining whether the reference URL adheres to an authentication protocol including a credential identifier and a web authentication host URL. When the reference URL adheres to the authentication protocol, the method also includes extracting the credential identifier and the web authentication host URL from the reference URL. The method further includes obtaining credential data from a remote service using the credential identifier and sending web authentication instructions to the browser. The web authentication instructions include the web authentication host URL and the credential data.
1 . A computer-implemented method when executed by data processing hardware causes the data processing hardware to perform operations comprising:
receiving, at a browser, a reference uniform resource locator (URL) requesting access to a web resource, the reference URL comprising a credential identifier identifying credential data;
determining, based on a format of the reference URL, that the web resource adheres to an authentication protocol; and
in response to determining that the web resource adheres to the authentication protocol:
obtaining, using the credential identifier, the credential data from a remote service, the credential identifier configured to publicly obfuscate the credential data associated with the credential identifier; and
sending web authentication instructions to the browser, the web authentication instructions comprising the obtained credential data.
2 . The computer-implemented method of claim 1 , wherein the authentication protocol comprises a custom protocol identifier.
3 . The computer-implemented method of claim 1 , wherein the authentication protocol comprises a format of web+credential://{Credential ID}@{Web Host}.
4 . The computer-implemented method of claim 1 , wherein the authentication protocol comprises a user identifier.
5 . The computer-implemented method of claim 4 , wherein the user identifier comprises an object identifier configured to publicly obfuscate an identity of a user associated with the user identifier.
6 . The computer-implemented method of claim 1 , wherein the credential data comprises a username and a password.
7 . The computer-implemented method of claim 1 , wherein sending the web authentication instructions is configured to cause the browser to auto-populate a login form using the obtained credential data.
8 . The computer-implemented method of claim 1 , wherein the web authentication instructions further comprise a login URL.
9 . The computer-implemented method of claim 8 , wherein sending the web authentication instructions is configured to cause the browser to:
execute the login URL to navigate to a login page;
determine login fields by parsing a document object model of the login page;
populate the login fields using the obtained credential data; and
redirect the browser to a web authentication host URL.
10 . A system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:
receiving, at a browser, a reference uniform resource locator (URL) requesting access to a web resource, the reference URL comprising a credential identifier identifying credential data;
determining, based on a format of the reference URL, that the web resource adheres to an authentication protocol; and
in response to determining that the web resource adheres to the authentication protocol:
obtaining, using the credential identifier, the credential data from a remote service, the credential identifier configured to publicly obfuscate the credential data associated with the credential identifier; and
sending web authentication instructions to the browser, the web authentication instructions comprising the obtained credential data.
11 . The system of claim 10 , wherein the authentication protocol comprises a custom protocol identifier.
12 . The system of claim 10 , wherein the authentication protocol comprises a format of web+credential://{Credential ID}@{Web Host}.
13 . The system of claim 9 , wherein the authentication protocol comprises a user identifier.
14 . The system of claim 13 , wherein the user identifier comprises an object identifier configured to publically obfuscate an identity of a user associated with the user identifier.
15 . The system of claim 10 , wherein the credential data comprises a username and a password.
16 . The system of claim 10 , wherein sending the web authentication instructions is configured to cause the browser to auto-populate a login form using the obtained credential data.
17 . The system of claim 10 , wherein the web authentication instructions further comprise a login URL.
18 . The system of claim 17 , wherein sending the web authentication instructions is configured to cause the browser to:
execute the login URL to navigate to a login page;
determine login fields by parsing a document object model of the login page;
populate the login fields using the obtained credential data; and
redirect the browser to a web authentication host URL.