feat(extension): fill TOTP/2FA codes

Author: cuihairu

browser/chromium-extension/README.md

@@ -29,6 +29,11 @@ When pairing is enabled (default), request a pairing code from the popup and app
 
 `persona bridge --approve-code <CODE>`
 
+TOTP/2FA support:
+
+- Create a TOTP credential with an associated URL (e.g. `persona totp setup --identity <name> --url https://github.com ...`)
+- On pages with 2FA inputs (e.g. GitHub), focus the code field and click the inline icon to fill the TOTP
+
 For Native Messaging host installation and protocol details, see:
 
 - `scripts/native-messaging/install-native-host.sh`

browser/chromium-extension/dist/background.js

@@ -93,7 +93,7 @@ chrome.runtime.onMessage.addListener((message, _sender, sendResponse) => {
 
     // Get TOTP code
     if (message?.type === 'persona_get_totp') {
-        handleGetTotp(message.origin, message.itemId).then(sendResponse);
+        handleGetTotp(message.origin, message.itemId, message.userGesture).then(sendResponse);
         return true;
     }
 
@@ -350,10 +350,11 @@ async function handleRequestFill(
  */
 async function handleGetTotp(
     origin: string,
-    itemId: string
+    itemId: string,
+    userGesture = true
 ): Promise<AutofillResult<{ code: string; remaining_seconds: number; period: number }>> {
     try {
-        const response = await getTotp(origin, itemId);
+        const response = await getTotp(origin, itemId, userGesture);
 
         if (!response.ok) {
             return {