github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-05-11 10:54:26 -05:00
Code Issues 1.1k Packages Projects Releases 124 Wiki Activity

[GH-ISSUE #935] Auto-fill should not be invoced by BankID #20278

New Issue
Closed
opened 2026-04-16 20:11:19 -05:00 by GiteaMirror · 9 comments
GiteaMirror commented 2026-04-16 20:11:19 -05:00
Owner
Copy Link

Originally created by @forteller on GitHub (May 29, 2020).
Original GitHub issue: https://github.com/bitwarden/android/issues/935

Hi. Thank you for a great product!

Describe the Bug

The auto-fill feature is great, but there's one situation where it's just in the way, for all your users in Norway.

In Norway, every time you want to log in to your bank or any other place where you need to verify your real ID, you log in with something called Bank ID. BankID is not a normal app, you don't install it yourself and it's not available through your list of apps. It's connected to your SIM card, and when you try to log in with it on a website it pops up on your phone, asking you for a pin code. If you close this screen asking for the pin you can not open it again, without waiting for a time out and then going trough the process again.

The problem is that Bitwarden autofill shows up and covers almost the entire OK button. You're supposed to input a 4 digit pin code, which is obviously easier to remember than your Bitwarden password. Also, if you miss the OK button and hit the Auto-fill popup instead, BankID closes, and you must wait for the timeout. So the auto-fill popup should never show in this situation, because you don't want to and can not use it.

In addition: If you are able to press OK, then the popup lingers on after the BankID screen is gone.

Steps To Reproduce

  1. Have a phone with a BankID compatible SIM card
  2. Go to a page where you log in with BankID on mobile
  3. Input your phone number and birth date
  4. Wait for the BankID screen to pop up on your phone
  5. Confirm the first screen
  6. Notice that on the second screen, where you input your pin code the Auto-fill popup covers almost the entire OK button.

Expected Result

The pop-up should not show in this situation

Actual Result

It does show up, making it very hard to get BankID to work

Screenshots or Videos

Screenshot_20200530-011652_SIM Toolkit

Environment

  • Device: Samsung Galaxy S7
  • Operating system: Android 8.0
  • Build Version: 2.3.1 (2257)
  • Is this a Beta release? N

Additional Context

https://www.bankid.no/en/company/

Originally created by @forteller on GitHub (May 29, 2020). Original GitHub issue: https://github.com/bitwarden/android/issues/935 Hi. Thank you for a great product! ## Describe the Bug The auto-fill feature is great, but there's one situation where it's just in the way, for all your users in Norway. In Norway, every time you want to log in to your bank or any other place where you need to verify your real ID, you log in with something called Bank ID. BankID is not a normal app, you don't install it yourself and it's not available through your list of apps. It's connected to your SIM card, and when you try to log in with it on a website it pops up on your phone, asking you for a pin code. If you close this screen asking for the pin you can not open it again, without waiting for a time out and then going trough the process again. The problem is that Bitwarden autofill shows up and covers almost the entire OK button. You're supposed to input a 4 digit pin code, which is obviously easier to remember than your Bitwarden password. Also, if you miss the OK button and hit the Auto-fill popup instead, BankID closes, and you must wait for the timeout. So the auto-fill popup should never show in this situation, because you don't want to and can not use it. In addition: If you are able to press OK, then the popup lingers on after the BankID screen is gone. ## Steps To Reproduce 1. Have a phone with a BankID compatible SIM card 2. Go to a page where you log in with BankID on mobile 3. Input your phone number and birth date 4. Wait for the BankID screen to pop up on your phone 5. Confirm the first screen 6. Notice that on the second screen, where you input your pin code the Auto-fill popup covers almost the entire OK button. ## Expected Result The pop-up should not show in this situation ## Actual Result It does show up, making it very hard to get BankID to work ## Screenshots or Videos ![Screenshot_20200530-011652_SIM Toolkit](https://user-images.githubusercontent.com/343561/83312659-750bb000-a213-11ea-8caf-bb1d8dac41fb.jpg) ## Environment - Device: Samsung Galaxy S7 - Operating system: Android 8.0 - Build Version: 2.3.1 (2257) - Is this a Beta release? N ## Additional Context https://www.bankid.no/en/company/
GiteaMirror commented 2026-04-16 20:11:20 -05:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (May 30, 2020):

Can you add this apps package id to the autofill blacklist under Settings > Options in Bitwarden?

<!-- gh-comment-id:636242994 --> @kspearrin commented on GitHub (May 30, 2020): Can you add this apps package id to the autofill blacklist under Settings > Options in Bitwarden?
GiteaMirror commented 2026-04-16 20:11:21 -05:00
Author
Owner
Copy Link

@forteller commented on GitHub (May 30, 2020):

How do I find that? It's not on any list of apps.

<!-- gh-comment-id:636244092 --> @forteller commented on GitHub (May 30, 2020): How do I find that? It's not on any list of apps.
GiteaMirror commented 2026-04-16 20:11:21 -05:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (May 30, 2020):

Select the autofill notification and it should open Bitwarden telling you the package id.

<!-- gh-comment-id:636245111 --> @kspearrin commented on GitHub (May 30, 2020): Select the autofill notification and it should open Bitwarden telling you the package id.
GiteaMirror commented 2026-04-16 20:11:22 -05:00
Author
Owner
Copy Link

@forteller commented on GitHub (May 30, 2020):

Ok, good. It says "There's no items in your vault for com.android.stk". Does this help finding out how to disable it for BankID for everyone?

I tried adding it to the blacklist, but when I tap away from the text box where I write the blacklist, the text just disappears.

<!-- gh-comment-id:636315809 --> @forteller commented on GitHub (May 30, 2020): Ok, good. It says "There's no items in your vault for com.android.stk". Does this help finding out how to disable it for BankID for everyone? I tried adding it to the blacklist, but when I tap away from the text box where I write the blacklist, the text just disappears.
GiteaMirror commented 2026-04-16 20:11:23 -05:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (May 30, 2020):

Add androidapp://com.android.stk to the blacklist

<!-- gh-comment-id:636341401 --> @kspearrin commented on GitHub (May 30, 2020): Add `androidapp://com.android.stk` to the blacklist
GiteaMirror commented 2026-04-16 20:11:23 -05:00
Author
Owner
Copy Link

@forteller commented on GitHub (Jun 3, 2020):

Thanks! That worked. My issue still stands, though. This should be the default. The pop up is not needed and is just a nuisance on the BankID screen.

<!-- gh-comment-id:637880546 --> @forteller commented on GitHub (Jun 3, 2020): Thanks! That worked. My issue still stands, though. This should be the default. The pop up is not needed and is just a nuisance on the BankID screen.
GiteaMirror commented 2026-04-16 20:11:24 -05:00
Author
Owner
Copy Link

@kspearrin commented on GitHub (Jun 3, 2020):

We cannot vet every app there is to blacklist in the app by default. This is why we have a user setting.

<!-- gh-comment-id:637880864 --> @kspearrin commented on GitHub (Jun 3, 2020): We cannot vet every app there is to blacklist in the app by default. This is why we have a user setting.
GiteaMirror commented 2026-04-16 20:11:25 -05:00
Author
Owner
Copy Link

@forteller commented on GitHub (Jun 3, 2020):

I've already given you the information you need: This makes the user experience of Bitwarden for all Norwegians pretty bad, and I've told you the Android ID of it. We might not be the largest market in the world, but we're still 5 million pretty affluent people. Isn't it worth it to just use the info I've already given you to make sure most of them don't figure Bitwarden stops them from using a service they need to use all the time (every time any Norwegian logs in to any bank, or any public website of any kind, and many other places where we need to verify our ID) and thus stops using Bitwarden?

<!-- gh-comment-id:637893340 --> @forteller commented on GitHub (Jun 3, 2020): I've already given you the information you need: This makes the user experience of Bitwarden for all Norwegians pretty bad, and I've told you the Android ID of it. We might not be the largest market in the world, but we're still 5 million pretty affluent people. Isn't it worth it to just use the info I've already given you to make sure most of them don't figure Bitwarden stops them from using a service they need to use _all the time_ (every time any Norwegian logs in to any bank, or any public website of any kind, and many other places where we need to verify our ID) and thus stops using Bitwarden?
GiteaMirror commented 2026-04-16 20:11:26 -05:00
Author
Owner
Copy Link

@dedsecorg commented on GitHub (Oct 3, 2021):

I did get it done with the hotfix presented here doing exclusions, i should have done this weeks ago tho, #notime #tomuchtoogoogle!!!!.
The only thing i might do not apreciate to much, is that BankID is using "com.android.stk". It could make trouble if they just block that "app". What about duo-sim with different country.
The app "com.android.stk" is the Sim Application Toolkit. This is a common library, it should not be autoblocked in any way as that is native! The power of default.

What i would sincerelly ask for:
"Possibility to move the bitwarden autofill window"

<!-- gh-comment-id:932890726 --> @dedsecorg commented on GitHub (Oct 3, 2021): I did get it done with the hotfix presented here doing exclusions, i should have done this weeks ago tho, #notime #tomuchtoogoogle!!!!. The only thing i might do not apreciate to much, is that BankID is using "com.android.stk". It could make trouble if they just block that "app". What about duo-sim with different country. The app "com.android.stk" is the Sim Application Toolkit. This is a common library, it should not be autoblocked in any way as that is native! The power of default. What i would sincerelly ask for: "Possibility to move the bitwarden autofill window"
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#20278
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?