coreui / coreui-pro / 30744941631

93%

main: 95%

Build Type

push

github

Committed by web-flow

Commit Message

fix(OTPInput): accept a code delivered by SMS autofill or a password manager (#665)

Autofill and password managers insert the whole code at once and fire `input`,
never `paste` — and the `input` handler only accepted `value.length === 1`,
while every slot carried `maxlength=1` and `autocomplete="one-time-code"`.
The code therefore stayed in the slot that received it (or was truncated to a
single character), the hidden form control kept its old value, and neither
`change` nor `complete` fired — so the form submitted an empty OTP and
auto-submit flows never ran.

- A multi-character value arriving in any slot is now spread across the field
  through the same path as a paste; a value at least as long as the field is
  treated as a complete code and fills from the first slot.
- The hidden value is read back from the slots, so a partial paste no longer
  discards characters already entered (`9` + paste `87` => `987`, was `87`).
- Only the first slot advertises `autocomplete="one-time-code"`; the rest are
  `off`, so autofill targets a single field. The first slot accepts the whole
  code while empty and shrinks back to one character once filled.
- Slots gained `enterkeyhint`, `autocorrect="off"` and `spellcheck="false"`.

The attribute recipe follows Base UI's OTP field, which uses the same
one-input-per-slot architecture we do. Seven regression tests, all red before
the fix; verified end to end in headless Chromium against the built bundle.

Coverage Stats

4690 of 5279 branches covered (88.84%)

Branch coverage included in aggregate %.

28 of 29 new or added lines in 1 file covered. (96.55%)

1 existing line in 1 file now uncovered.

9080 of 9508 relevant lines covered (95.5%)

633.39 hits per line