Search results for

ASWebAuthenticationSession cookie

1,295 results found

Post

Replies

Boosts

Views

Activity

Reply to Clarification on App Tracking Transparency (ATT) and Cookie Banner Integration
I want to know the same thing. Apple's reviewers are disconnected from what the review guidelines actually say and are rejecting anything that looks like it might have cookies. I don't want to be implementing ATT and be forced to say in the app privacy information that we do tracking by Apple's definition because we don't. Someone from Apple needs to clarify why apps are being rejected on this.
Feb ’25
Fitbit Google login Issue in WKWebView
I’m developing an app that has a Fitbit login page embedded in a WKWebView. On the Fitbit login page, there is a Google login button. When I try to log in to Fitbit via Google, some devices redirect back to the Fitbit login page even after entering the correct Google credentials. However, it works on the second attempt. I tested the same URL in the default browser, and it works fine when the page is loaded in the browser instead of inside the WebView. I tried the following workarounds but was unable to fix the issue: 1. Enabled JavaScript in WebView. 2. Tried cookie synchronization between WKWebsiteDataStore and HTTPCookieStorage.
1
0
256
Feb ’25
Reply to Intermittent Failures Launching App from Universal Links using ASWebAuthenticationSession
Thank you for the post. The Universal Links should always open the app if it is configured correctly and installed on the device. It would be beneficial to find a device where, after installing the app, the browser still opens instead of the app. By examining the sysdiagnose swcutil file, we can identify any errors related to this issue. If you have a device experiencing this problem, you will be able to pinpoint the error. Can you get one of those devices and extract the swcuilt file? Given that you are handling the ASWebAuthenticationSession, there could be an issue with authentication. I have a few ideas that may be helpful: App Delegate Methods: Ensure that your app delegate handles Universal Link continuations correctly. Override the necessary methods in your app delegate to handle incoming Universal Links. ASWebAuthenticationSession Completion: Verify that you are handling the completion handler of ASWebAuthenticationSession properly. Make sure to call the completion handler w
Topic: Privacy & Security SubTopic: General Tags:
Feb ’25
AVURLAsset with AVURLAssetHTTPCookiesKey - Cookies not persisting on retry requests
I'm experiencing an unexpected behavior with AVURLAsset and cookies. When setting cookies through AVURLAssetHTTPCookiesKey option, they seem to be sent only on the initial request but not on retry attempts. Here's my current implementation: let cookieProperties: [HTTPCookiePropertyKey: Any] = [ .name: sessionCookie, .value: testValue, .domain: url.host ?? , .path: /, .secure: true ] if let cookie = HTTPCookie(properties: cookieProperties) { let asset = AVURLAsset(url: url, options: [ AVURLAssetHTTPCookiesKey: [cookie], ]) } According to the documentation, AVURLAssetHTTPCookiesKey should apply the cookies to all requests made by this asset. However, when the initial request fails and AVPlayer retries, the cookies are not included in subsequent requests. Only when I store the cookie with HTTPCookieStorage.shared.setCookie, then it persists. Questions: Is this the expected behavior? If not, what could be causing the cookies to not persist fo
0
0
326
Feb ’25
Intermittent Failures Launching App from Universal Links using ASWebAuthenticationSession
I'm developing an iOS app that utilizes Universal Links and ASWebAuthenticationSession to deep-link from a website to the app itself. This implementation adheres to the recommendations outlined in RFC 8252, ensuring that the app opening the ASWebAuthenticationSession is the same app that is launched via the Universal Link. Problem:  While most users can successfully launch the app via Universal Links,a few percent of users experience instances where the app fails to launch, and the user is redirected to the browser. What I've Tried:  ASWebAuthenticationSession Configuration: I've double-checked the configuration of callbackURLScheme and presentationContextProvider.  Universal Links: Verified the apple-app-site-association file and associated domains entitlement.  Network Conditions: Tested on various network environments (Wi-Fi, cellular) and devices. Questions:  What are the potential causes for this behavior?  Has anyone else encountered a similar issue and found a solution?  Are
5
0
1k
Feb ’25
ServiceWorker Support in iOS WKWebView
Is ServiceWorker supported on WKWebView? As per Mozilla Developer Network(MDN Web) docs[1] its not supported, but our research shows that ServiceWorker becomes available for a domain in WKWebView 1) if the domain is allowlisted in app-bound domains[2] or 2) if app is registered as default browser(this can not be considered for our app as its not a browser). How to enable ServiceWorker on WKWebView? Is adding domain as app-bound domain the right/only way to enable ServiceWorker on WKWebView? We didn't find any official documentation about this. Can WebView get ServiceWorker support by default without enabling app bound domains since that is not an option for our app? Our app needs to support more than 10 domains. Powerful APIs such as JavaScript injection, cookie manipulation, event handlers are by default available to all domains/WebView instances even if App doesn't enable app-bound domains. Is it possible to do same for ServiceWorker? If ServiceWorker can not be supported by default then can Apple
Topic: Safari & Web SubTopic: General Tags:
9
0
1.1k
Jan ’25
Clarification on App Tracking Transparency (ATT) and Cookie Banner Integration
We are currently using Single Sign-On (SSO) for user authentication within our app, which is presented through a web view. This web view includes a cookie banner that allows users to either accept, reject all, or manage cookies. In some reviews, Apple suggests implementing App Tracking Transparency (ATT) if cookies are used. In other reviews, Apple may refer to guideline 5.1.2, which states: “Revise the app so that users are not required to enable tracking in order to access the app's content and functionality.” I have a few questions regarding the interaction between ATT and the cookie banner: 1 Is App Tracking Transparency required for the cookie banner?
If yes, iOS developers have no direct control over the cookies used on the webpage when the user selects Ask App Not to Track or Allow. Despite this selection, the cookie banner still appears, prompting the user to accept or reject cookies. 2 How should App Tracking Transparency be impl
2
0
676
Jan ’25
Reply to Sandbox Page Is Completely Blank/Empty
My 2 cents on this: Step 1: Go to the People page. Step 2: Open Developer tools, Application and delete all Cookies for this site. Step 3: Click the Sandbox link. The page will load with errors, but the + button will be visible. Step 4: Click the + (Add) button. Step 5: Login back to App Store Connect from a new Tab. Step 6: Hit the save button on the first Tab after filling-in the details. After I added the first tester the page loads fine for me.
Jan ’25
Subscription permission denied on webapp push
HI, please can someone help? I have a web app where push notifications are in place for Chrome, Firefox, and Edge. Providing the user allows notifications then when they log in for the first time their details are registered to the subscriptions table in the backend. All good so far. When trying to do the same with Safari on Mac I'm faced with this issue: Safari doesn’t support invisible push notifications. Present push notifications to the user immediately after your service worker receives them. If you don’t, Safari revokes the push notification permission for your site. and the user is not registered in the subscription table with the Safari console just saying variations of this: [Warning] Notification permission denied. (notifications_frontend.js, line 177, x2) [Log] Enable Notifications button clicked (notifications_frontend.js, line 245) [Log] Safari Push Notifications detected (notifications_frontend.js, line 248) [Warning] Safari Push Permission denied. (notifications_frontend.js, line 278) I've foun
0
0
330
Jan ’25
Safari no connection
Upon upgrading to 18.3 safari now says no connection cleared cookies and data. Disabled all extensions and all von and security anyone else having this issue
Topic: Safari & Web SubTopic: General
0
0
214
Jan ’25
iOS 18 not able to clear the app safari browser cookie from local store cookie
We are getting the cookie from server side when user will do the login successful. Cookie store into app browser. This cookie need to clear when user will do the logout app. We are using the Cordova framework to create the iOS application. In Cordova i have used plugin to clear the cookie. But in iOS device not able to clear the app browser cookie. And in android device same Cordova plugin is working fine. Why the iOS device not able to clear the cookie using Cordova plugin? Plugin name - https://github.com/Cartegraph/cordova-cookie-master Kindly help me out with the solutions.
1
0
391
Jan ’25
Reply to SFSafariViewController for 3rd party passkey authentication
While SFSafariViewController supports using passkeys to sign in to websites, if you're trying to authenticate your own app via a web sign in (such as OAuth) you'll want to use ASWebAuthenticationSession instead. This will show a managed instance of SFSafariViewController, but also provides APIs for directly completing the authentication with your native code as well. https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession If you were trying to use SFSafariViewController to avoid single-sign on, you can also consider setting prefersEphemeralWebBrowserSession on the session as well. If you're working with SwiftUI there's a better API available via EnvironmentValues.webAuthenticationSession: https://developer.apple.com/documentation/authenticationservices/webauthenticationsession/
Topic: Safari & Web SubTopic: General Tags:
Jan ’25