Support In-App WebView

[Joseph-Nathan]

Describe the bug

Firebase BackEnd does n't support external callable method

To Reproduce

Steps to reproduce the behavior:

1. Create FireBase project
2. provide any Auth Provider as Google
3. try to Authentication with external browser tab
4. See Error :
   Unable to process request due to missing initial state. This may happen if browser sessionStorage is inaccessible or accidentally cleared.

Expected behavior

After Authentication , callable method fire and get back to App .

Screenshots

Device (please complete the following information!)

• Device: [ OPPO F11 ]
• OS: [Andriod 12]
• Browser: [Chrome]
• flutter_web_auth version: [e.g. 0.4.1]

Additional context

if add support to in_App_Webview that will be great

[AndreiRoze]

Shortly, it's not library issue. Look like it's incorrect behaviour of Firebase for some phones/browsers. More info here firebase/firebase-js-sdk#4256

[Joseph-Nathan]

@AndreiRoze we know , can you provide any way to pass this .

[AndreiRoze]

@Joseph-Nathan, you can try to use redirect to your server and from your server redirect to app by package name, but i am not sure, may be it useless.

[ThexXTURBOXx]

The issue may be related to Firebase, but the feature request with the In-App web view is a nice idea. So I let this open for now

[komaxx]

Wouldn't a In-App web view pretty much defeat the whole point of OAuth?

As far as I understand, running some sort of WebView in the caller's process also enables accessing everything that's entered into the login page (by adding JavaScript hooks, or DOM scraping, or piping interaction through an invisible overlay view, or ...), thus exposing user credentials to the calling app.

At that point there would be no security gain over just letting the user enter her credentials directly into the app, right?

[ThexXTURBOXx]

Yes, that is the reason why I recently decided against it. However, I am still thinking about other ways to provide the callback process

[Joseph-Nathan]

any news for provide callback process to Firebase ?