cordova-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF GitHub Bot (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-11136) InAppBrowser fails to close with WKWebView OAuth
Date Wed, 30 Nov 2016 11:30:59 GMT

    [ https://issues.apache.org/jira/browse/CB-11136?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15708310#comment-15708310
] 

ASF GitHub Bot commented on CB-11136:
-------------------------------------

Github user jlchereau commented on the issue:

    https://github.com/apache/cordova-plugin-inappbrowser/pull/187
  
    I have experienced the defect described here with oAuth flows but considering [Google
deprecation of webviews for oAuth flows](https://developers.googleblog.com/2016/08/modernizing-oauth-interactions-in-native-apps.html),
I have decided to pursue another route explained here: https://medium.com/@jlchereau/stop-using-inappbrowser-for-your-cordova-phonegap-oauth-flow-a806b61a2dc5.
I am looking forward to your opinion on this alternative especially regarding any security
flaws I might have overlooked.


> InAppBrowser fails to close with WKWebView OAuth 
> -------------------------------------------------
>
>                 Key: CB-11136
>                 URL: https://issues.apache.org/jira/browse/CB-11136
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Plugin InAppBrowser, Plugin WKWebViewEngine
>    Affects Versions: 4.1.0
>         Environment: iOS 8+ with WKWebView
>            Reporter: Geordie Jay
>            Assignee: Shazron Abdullah
>              Labels: pull-request-available
>   Original Estimate: 3h
>  Remaining Estimate: 3h
>
> Launching InAppBrowser from Cordova iOS Platform 4+ with its WKWebView for OAuth (e.g.
Facebook or Google login) fails to close as it should.
> The reason is that the entire WKWebView thread seems to pause when another view controller
is presented. This can be confirmed by inspecting the WKWebView session in Safari, running
`window.open('http://something.com')` and then trying to enter another command into that Safari
console.
> I made a hacky but working version of this that animated in the InAppBrowser's view manually,
rather than 'presenting' the ViewController in the traditional iOS style. In that instance
the WKWebView thread continues as normal and receives the confirmation to close the other
InAppBrowser when the OAuth process is complete.
> Maybe there is a better way around this, but at the moment this is a big usability fail
for all WKWebView users.
> What do you all think, is the 'not-actually-presenting' way of presenting the InAppBrowser
acceptable? Would be happy to make a pull request along these lines if it is.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Mime
View raw message