appauth-android-codelab icon indicating copy to clipboard operation
appauth-android-codelab copied to clipboard

Please Do Not Use Implicit Intents

Open commonsguy opened this issue 6 years ago • 1 comments

This sample app shows using an implicit Intent in the PendingIntent for the authentication response. As a result, other apps can intercept this response, just by having an <intent-filter> matching the Intent.

Please do not use an implicit Intent here. Please use an explicit Intent, to make certain that the authentication results go to the app that requested the authentication. Please do not demonstrate to unwary developers that using an implicit Intent is a sensible thing to do in this scenario.

commonsguy avatar May 26 '19 14:05 commonsguy

Please share the sample project how to use Explicit Intent.

SanjayKatagihallimath avatar Nov 11 '19 12:11 SanjayKatagihallimath