If that's the problem you're trying to solve, disallow embedded ~~logins~~ webviews and do it through a proper browser, same as on a regular computer. The other way seems overkill and smells like foul play to me.
back
3 comments
I'm not sure how you disallow embedded login without disallowing embedded webviews. The line is very blurry.
I'm sorry, I wrote embedded logins but was thinking embedded webviews in general. The only legitimate use of that in my mind is "a web browser app that's a usability skin over Chrome". Everything else is just a way of keeping you in a walled garden, and would be better if it just sent you to your default browser.
Ok. So I think we are in agreement. I struggle to think of a use case that is in the user's best interests.
You have two types of webviews... "Webviews to the appmakers server", and "Webviews for the wider web".
Webviews to the appmakers server need to be authorized by some manifest file on the server whitelisting the app identifier.
Webviews for the wider web don't allow the app to know what's going on inside the webview, nor interact with it. So these are safe to type passwords into etc.
So this would have no effect, because you can simply embed Chromium in your app instead of using the system-provided WebView. Because Android is very fragmented and there are still a significant amount of devices out there running less than Android M when the web view was made an upgradeable package, there is, at least for now, a very legitimate reason to ship your own browser implementation within an app that is primarily implemented using web tech: The Web View implementation shipped with M and earlier is not sufficient to run such an application.
> disallow embedded logins and do it through a proper browser
How would you propose doing this from a technical standpoint?
How is android supposed to know what an embedded login is on a web page?
What happens when you're in an SSO or other secure environment and need to refresh credentials after a redirect?
Is Friendly Social Browser maybe a good solution to this problem?