dropbox / dropbox/dropbox-sdk-java
AuthActivity with Firefox's "Tab queue" turned on cancels login flow
- Dominant language
- Java
- Stars
- 627
- Forks
- 463
- Avg merge
- 5m
- Merged PRs (30d)
- 10
Description
SDK version: 3.0.8
Android Version: 7.1.1 (didn't test on other versions)
On Android, Firefox's Tab Queue feature causes the web browser login flow to not work due to SDK's `AuthActivity` treating the login flow as cancelled before user runs the login flow.
Repro Steps:
1. Set Firefox as default Browser for Android.
2. In Firefox go to Settings -> General -> Turn on "Tab queue" (which requires grating access Firefox to draw over apps, Settings link should show in Firefox when turning this on for the first time).
3. Invoke SDK's `AuthActivity` from client app with no Dropbox app installed (to invoke browser flow) which causes `AuthActivity` to request Android to launch the login flow URL in a web browser which launches the Firefox browser to open the login flow URL.
4. Due to Firefox's "Tab queue" feature, Firefox opens the login flow URL internally but does NOT show it to the user. Instead it returns right away causing `AuthActivity` in client app to show again while also showing a Toast like UI from Firefox to open the queued URL.
5. User then opens the login flow with the Firefox Tab queue Toast UI which then does show the login flow URL in Firefox now.
6. When user completes login flow in Firefox the web login flow navigates back to client application.
7. Client app's `AuthActivity` when navigated back does nothing because the Dropbox SDK has no token associated with the completed login flow.
The reason for having no token in the Dropbox SDK in step 7 is because in Step 4 when Firefox navigates back to the client app, the Dropbox SDK handles this as a cancelled login attempt and wipes its internal state (same would happen if user task switches back to client app while on Login flow in browser). This logic can be seen in https://github.com/dropbox/dropbox-sdk-java/blob/c710ef80f1c2700031baad7c615dc9934162c090/src/main/java/com/dropbox/core/android/AuthActivity.java#L412 (`onResume()` will be called for the second time when Firefox navigates back to client app while `mAuthStateNonce` is non null -> `authFinished(null)`)
For now I'm advising users who report this to simply turn off Firefox's "Tab Queue" feature or install Dropbox however it would be ideal if this just worked for users.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.