Codename One Adds OTP Autofill Without Requiring SMS Inbox Access

Open-source framework Codename One has introduced one-time-code autofill support via pull request #5642, allowing apps to fill SMS verification codes without reading a user's inbox. The update adds a country-aware phone-number field and a ready-made PhoneVerification component that handles code entry, resend timing, and server callbacks. On iOS, Android, and browsers, the operating system delivers only the intended code through its protected autofill path, keeping the rest of the inbox inaccessible to the app. A redesigned OTP field now uses a single native editor behind multiple display boxes, fixing earlier issues where autofill and paste were truncated after the first digit. Codename One emphasises that autofill handles convenience only, while security policies such as rate-limiting, code expiry, and session creation remain the responsibility of the server.