Support In-App WebView about flutter_web_auth_2 HOT 7 OPEN

Wouldn't a In-App web view pretty much defeat the whole point of OAuth?

As far as I understand, running some sort of WebView in the caller's process also enables accessing everything that's entered into the login page (by adding JavaScript hooks, or DOM scraping, or piping interaction through an invisible overlay view, or ...), thus exposing user credentials to the calling app.

At that point there would be no security gain over just letting the user enter her credentials directly into the app, right?

from flutter_web_auth_2.

Yes, that is the reason why I recently decided against it. However, I am still thinking about other ways to provide the callback process

from flutter_web_auth_2.

Shortly, it's not library issue. Look like it's incorrect behaviour of Firebase for some phones/browsers. More info here firebase/firebase-js-sdk#4256

from flutter_web_auth_2.

@AndreiRoze we know , can you provide any way to pass this .

from flutter_web_auth_2.

@Joseph-Nathan, you can try to use redirect to your server and from your server redirect to app by package name, but i am not sure, may be it useless.

from flutter_web_auth_2.

The issue may be related to Firebase, but the feature request with the In-App web view is a nice idea. So I let this open for now

from flutter_web_auth_2.

any news for provide callback process to Firebase ?

from flutter_web_auth_2.