Hacktoberfest 2026:维护者为十月标记出来的 issue,仍然开放、适合新手。 浏览 Hacktoberfest issue

Secure Keyboard Entry refusal should name the app/window that enabled it

已关闭
#176 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

维护者通常 1 天内回复

已经有一个关联 PR 被合并了。

  • #217 来自 @iamnbutler —— 已合并

评估

难度
3/5
预计耗时
1-2 天
新手友好度
67/100
Issue 类型
功能
描述清晰度
描述清楚
活跃度
活跃
技术栈
macos, swift

调研方向

Start from the typing route that refuses input when Secure Keyboard Entry is active, then check how desktop_apps reports session.secure_keyboard_entry and how focus information is exposed. Include the focused app identity in the refusal so the user can identify the blocking dialog; done when the refusal names the app holding focus or provides its bundle ID.

由索引模型根据 Issue 内容生成。

描述

What happened

Typing into an ordinary web form field in Safari was refused:

desktop_insert → refused
"Secure keyboard entry is on, as for a password field or a terminal's
 Secure Keyboard Entry, so typed text can't be delivered. Nothing was typed."
hint: "Use a field that isn't secure, or turn off Secure Keyboard Entry in the app."

There was no secure field anywhere near the target. The actual cause was a
com.apple.NetAuthAgent SMB password dialog open behind the Safari window,
holding focus on an AXSecureTextField. macOS enables secure input globally
while that field has focus, so every synthesized keystroke in every app is
blocked.

Why the current hint doesn't help

"turn off Secure Keyboard Entry in the app" is ambiguous — which app? The
agent is pointed at its own target window, which is not the cause. I only
found the real cause by noticing focus.bundle_id had changed to
com.apple.NetAuthAgent in an unrelated desktop_apps call, then inspecting
that window.

Also note the fix is something the agent cannot do: system password prompts
are (correctly) refused to agents, so the only resolution is asking the user
to dismiss a specific dialog — which requires naming it.

Suggestion

desktop_apps already reports session.secure_keyboard_entry. When a typing
route is refused for this reason, include the app that currently holds focus
in the refusal, e.g.:

"Secure keyboard entry is on. com.apple.NetAuthAgent ("Enter your name and
 password for the server …") holds focus on a secure field. Ask the user to
 dismiss or complete it; agents cannot answer system password prompts."

Even just focused_bundle_id in the error payload would be enough to let the
agent inspect and describe it.

Environment

Desktop Tools 0.16.1 (app + MCP), macOS 27, Safari 27

主要语言
Swift
星标
0
派生
0
平均合并
39 分钟
30 天内合并 PR
162

环境准备

这个项目没有提供开发容器、Dockerfile 或贡献指南,环境需要你自己搭建:先看它的 README,通用步骤见我们的新手贡献指南。

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

githubnext/desktop-tools 的其他 Issue

查看 githubnext/desktop-tools 的全部 Issue

相似的 Issue

更多 Swift Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。