fosrl / fosrl/android

Android login hangs on "generating sign in code..." when browser is Firefox

Open
#27 3 comments 1 reaction 0 assignees View on GitHub
needs investigating
Dominant language
Kotlin
Stars
43
Forks
10
Avg merge
1m
Merged PRs (30d)
1

Description

### Describe the Bug

After completing OIDC authorization in the browser, the app stays on "generating sign in code..." indefinitely. The success page fires an Android deep link via window.location.href = "intent://auth-success#Intent;scheme=pangolin;package=net.pangolin.Pangolin;end" — but Firefox on Android silently ignores intent:// URIs (this scheme is Chrome-only). The app never receives the callback and never polls for the session token.
Server side completes correctly: deviceWebAuthCodes shows verified=1 with the correct userId populated. Zero network traffic from the device after the OIDC redirect — the app is simply never signaled.

### Environment

- Pangolin: 1.17.1
- Android app: latest (Play Store)
- Browser: Firefox for Android (reproduced); Chrome for Android (works)

### To Reproduce

1. Open the Pangolin Android app → tap Sign In
2. When the browser opens, complete OIDC authorization (Authentik)
3. Browser reaches the success page
4. App remains on "generating sign in code..." spinner indefinitely

### Expected Behavior

App receives the deep link callback, polls /api/v1/auth/device-web-auth/poll/, and completes login.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.