-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Description
Description:
If a certificate auth challenge is requested on Android the webview will hang if no certificate is loaded.
This is a recent breaking change, #2624.
Our authentication providers will first present a cert auth challenge, if that auth challenge is canceled, the auth provider will present a view allowing users to authenticate via a different means. Our users do not have client certificates they can load into the RocketChat mobile application. As such the auth challenge presented by our auth provider is never canceled, and the page load never completes.
Environment Information:
- Rocket.Chat Server Version: Any
- Rocket.Chat App Version: Since 4.13.0 https://github.com/RocketChat/Rocket.Chat.ReactNative/releases/tag/4.13.0
- Device Name: any
- OS Version: Android, any version
Steps to reproduce:
- Do not load a client certificate into Android app.
- OAuth authentication against webpage that presents cert challenge.
- Page will not load as auth challenge is not canceled if no client cert is present.
Expected behavior:
Auth challenge should fallback to default Android behavior and cancel the authentication challenge if now client cert is present.
Actual behavior:
Auth challenge is not canceled, page hangs.
Additional context:
This is a breaking change in which our Android users cannot currently authenticate.
