Skip to content

[BUG] Android - auth challenge with no cert loaded causes authentication webview to hang #2917

@newmanw

Description

@newmanw

Description:

If a certificate auth challenge is requested on Android the webview will hang if no certificate is loaded.

This is a recent breaking change, #2624.

Our authentication providers will first present a cert auth challenge, if that auth challenge is canceled, the auth provider will present a view allowing users to authenticate via a different means. Our users do not have client certificates they can load into the RocketChat mobile application. As such the auth challenge presented by our auth provider is never canceled, and the page load never completes.

Environment Information:

Steps to reproduce:

  1. Do not load a client certificate into Android app.
  2. OAuth authentication against webpage that presents cert challenge.
  3. Page will not load as auth challenge is not canceled if no client cert is present.

Expected behavior:

Auth challenge should fallback to default Android behavior and cancel the authentication challenge if now client cert is present.

Actual behavior:

Auth challenge is not canceled, page hangs.

oauth-android

Additional context:

This is a breaking change in which our Android users cannot currently authenticate.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions