4 ms·
Google doesn't allow auth in a webview. The reasoning is that any application prompting you to login with a 3rd party service (ex: google/facebook/twitter/etc)
by horsawlarway 6y ago
Google doesn't allow auth in a webview. The reasoning is that any application prompting you to login with a 3rd party service (ex: google/facebook/twitter/etc) in a webview can compromise the account.
Technically, they're correct - It's pretty easy to inject code into a webview you own, and it can do basically anything it likes (for example - record the username/password you just entered into the Google login page).
So Google's stance is that you need to use a browser they approve of to access your account, and if they spot a webview they tend to block it and show this message.
I'm conflicted - As someone responsible for doing security audits, their concerns are fair.
As someone who does not believe Google is operating with any vestiges of the "Do no evil" motto, this is also a very convenient way to block new entries to the browser market.
- unlog 6y ago> Google's stance is that you need to use a browser they approve of to access your account Yeah thats the crazy up situation..... I could maybe access via a imap client, Guess they will ask for an "insecure app password" (I forgot the name of this) But the thing that blows my mind is that you cannot make your own browser! Thats the problem..... because I was considering to do just that, my own browser, wow, I cannot do it without google approval..... I will need to think about it....