CRT/storebound
1
0
Fork 0
Code Issues Pull requests Releases 1 Packages 1 Activity Actions

console fill: sign-in detected by URL, frame and text; keeps watching after the fallback; session kept across relaunches; one login across Play developer accounts and App Store Connect teams

Browse source
This commit is contained in:
CRTkafa 2026-10-12 02:54:48 +08:00
parent e5f610a033
commit 21c0c2ed60
22 changed files with 1101 additions and 110 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tests/fixtures/console/idmsa-signin.html vendored Normal file
View file

@ -0,0 +1,11 @@
<!doctype html>
<!-- MODELED, not recorded: the first page of Apple's sign-in form (the idmsa.apple.com frame): no password field yet.
storebound must detect it, never type into it and never click anything in it. -->
<html lang="en"><head><meta charset="utf-8"><title>Sign In</title><script src="/_common.js"></script></head>
<body>
<h1>Sign in to App Store Connect</h1>
<p><label for="acc">Email or Phone Number</label> <input id="acc" type="text"></p>
<p><label><input type="checkbox"> Keep me signed in</label></p>
<button type="button">Continue</button>
<button type="button">Sign in with Passkey</button>
</body></html>