odiseo42 opened a new issue, #973:
URL: https://github.com/apache/cordova-plugin-inappbrowser/issues/973

   I've been using cordova-plugin-inappbrowser successfully for 4 years to 
allow users authenticate via OAuth. My customers are enterprise and are 
starting to use tools like Intune to deploy apps. However, recently I got 
reports that default security rules on Azure SSO portals prevent in-app-browser 
from logging in, in particular because the user agent it is identified as a non 
native (i.e. Safari) browser.
   
   The plugin [InAppBrowser for NativeScript 
states](https://openbase.com/js/a2c-nativescript-inappbrowser/documentation):
   
   
   > Use in-app browser tabs (like 
SFAuthenticationSession/ASWebAuthenticationSession and Android Custom Tabs) 
where available. Embedded user-agents, known as web-views (like UIWebView and 
WKWebView), are explicitly not supported due to the usability and security 
reasons documented inĀ [Section 8.12 of RFC 
8252](https://tools.ietf.org/html/rfc8252#section-8.12).
   
   My question is, is there a plan or alternative for 
cordova-plugin-inappbrowser so it does not use webviews, and instead use native 
Safari browser?
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to