From d0401b310ed7c93b0dd3d23ecd3f45b97f1e8a4c Mon Sep 17 00:00:00 2001
From: David Perez <david@livefront.com>
Date: Tue, 5 May 2026 14:20:46 -0500
Subject: [PATCH] PM-36474: bug: Ensure shared totp labels do not parse secret
 (#6873)

---
 .../repository/util/SharedAccountDataExtensions.kt             | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/authenticator/src/main/kotlin/com/bitwarden/authenticator/data/authenticator/repository/util/SharedAccountDataExtensions.kt b/authenticator/src/main/kotlin/com/bitwarden/authenticator/data/authenticator/repository/util/SharedAccountDataExtensions.kt
index fe3bfcd38e..27b3a84833 100644
--- a/authenticator/src/main/kotlin/com/bitwarden/authenticator/data/authenticator/repository/util/SharedAccountDataExtensions.kt
+++ b/authenticator/src/main/kotlin/com/bitwarden/authenticator/data/authenticator/repository/util/SharedAccountDataExtensions.kt
@@ -25,7 +25,8 @@ fun List<SharedAccountData.Account>.toAuthenticatorItems(): List<AuthenticatorIt
                     .pathSegments
                     .firstOrNull()
                     ?.removePrefix("$issuer:")
-                    ?.takeUnless { it.isBlank() }
+                    // If there is no scheme, then the whole uri is the secret.
+                    ?.takeUnless { it.isBlank() || uri.scheme == null }
                     ?: cipherData.username
 
                 AuthenticatorItem(