6 ms·
Looks like the Google OAuth authorization flow. Google's policy[0] is that apps should be requesting OAuth authorization using the system browser, not an embed
by jsnell 2y ago
Looks like the Google OAuth authorization flow.
Google's policy[0] is that apps should be requesting OAuth authorization using the system browser, not an embedded webview. It's a sensible policy. We don't want to teach users to write the credentials for their Google accounts into random apps.
Going via the system browser is likely to be better user experience anyway, since anyone using a "sign in via Google" option is likely already logged into Google on their system browser, while they obviously won't be on a webview.
[0] https://developers.googleblog.com/en/upcoming-security-changes-to-googles-oauth-20-authorization-endpoint-in-embedded-webviews/ https://developers.googleblog.com/en/upcoming-security-chang...
- Animats 2y agoAh. That makes more sense. Not clear that Google OAuth is worthy of trust for anything outside Google, though.