Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Incognito Custom Tab (Ephemeral Session) support to Android Auth0 SDK #715

Open
5 tasks done
sachin-tripactions opened this issue Feb 7, 2024 · 3 comments
Open
5 tasks done
Labels
feature request A feature has been asked for or suggested by the community

Comments

@sachin-tripactions
Copy link

Checklist

  • I have looked into the Readme, Examples, and FAQ and have not found a suitable solution or answer.
  • I have looked into the API documentation and have not found a suitable solution or answer.
  • I have searched the issues and have not found a suitable solution or answer.
  • I have searched the Auth0 Community forums and have not found a suitable solution or answer.
  • I agree to the terms within the Auth0 Code of Conduct.

Describe the problem you'd like to have solved

The problem I would like to have solved is the lack of support for Incognito Custom Tab (Ephemeral Session) in the Android Auth0 SDK. Currently, the SDK does not provide a way to open an Incognito Custom Tab with an ephemeral session, which can be useful for scenarios where the user wants to authenticate without leaving any traces on the device. Our iOS app uses the iOS Auth0 SDK and is able to solve issues related to web cookies by implementing similar functionality since it has Ephemeral Session feature.

Describe the ideal solution

The ideal solution would be to enhance the Android Auth0 SDK by adding support for Incognito Custom Tab with an ephemeral session. This would allow developers to easily integrate this feature into their applications and provide a more secure and privacy-focused authentication experience for their users. Also not having to deal with issues related to cookies which intersect our web apps.

Alternatives and current workarounds

I have tried explicit logout - but it does not solve issue for our use-case since web app can be logged in anytime through email deeplinks.

Additional context

No response

@sachin-tripactions sachin-tripactions added the feature request A feature has been asked for or suggested by the community label Feb 7, 2024
@trod-123
Copy link

trod-123 commented Sep 9, 2024

+1. The current sign out behavior where the browser opens for a split second just to clear some cookies is honestly a bit ridiculous from a user experience perspective. Would love to see if there is a way we can avoid having to do that.

@10ndavis
Copy link

I'm shocked this isn't already supported. This essentially prevents being able to switch users without tapping log out. (Expired JWT)

@JiangHongTiao
Copy link

Please implement ASAP

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request A feature has been asked for or suggested by the community
Projects
None yet
Development

No branches or pull requests

4 participants