8000 MBL-1262: QA party bug fixes by Arkariang · Pull Request #1971 · kickstarter/android-oss · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

MBL-1262: QA party bug fixes #1971

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Mar 7, 2024
Merged

MBL-1262: QA party bug fixes #1971

merged 4 commits into from
Mar 7, 2024

Conversation

Arkariang
Copy link
Contributor
@Arkariang Arkariang commented Mar 7, 2024

📲 What

3 bug fixes in this PR :)

👀 See

1 - Navigate away to other apps while chrome tab is presented:

  • the chrome tab no longer gets killed when lost foreground.
  • the activity task remains the parent, not a new one.
exchangingApps.mp4

2 - Not related with OAuth bot found it by chance :) the issue is with verified deeplinks, the '*' wildcard regex, even though specified in the manifest as auto-verified, it had to manually by added as verified link, exchanged over www to not have to manually add it.
| Before 🐛 |
Screenshot 2024-03-07 at 1 26 55 PM

verifiedLinks_without.mp4

After 🦋 |
Screenshot 2024-03-07 at 1 28 20 PM

verifiedLinks_with.mp4

3 - During Change Password flow, the user gets logged out after the password was changed successfully, and presented the login flow to access again. The presented flow was the non-OAuth version.

| --- | --- |
| | |

📋 QA

1 - For number 1 just navigate away from the app to retrieve credentials, (any password manager etc), come back to the app. There should be only 1 instance of the app, the Chrome tab parent task is now the app and not a new one, Chrome tab no longer killed after losing foreground.

2 - For number two, fresh install a version of the app with this branch, and take a look App info -> open by default -> 1 verified links. Previous versions to this branch will show 0 verified links, even though the documentation says the wildcard regex is valid for hosts, it seems not be able to autoverify automatically when used.
Screenshot 2024-03-07 at 1 38 23 PM

3 - Follow the change password flow -> change your password -> when feature flag on now you should be presented with LoginToutActivity, when feature flag off you should be presented with LoginActivity

Story 📖

MBL-1262

- Removed task affinity, StrandHogg Attack affecting android 10 or lower devices do not affect now as loggin/signup happens on  chrome tab
@Arkariang Arkariang marked this pull request as ready for review March 7, 2024 12:43
@Arkariang Arkariang self-assigned this Mar 7, 2024
@Arkariang Arkariang added the OAuth 2.0 Tied to epic https://kickstarter.atlassian.net/browse/MBL-1108 label Mar 7, 2024
Copy link
Contributor
@mtgriego mtgriego left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested locally and working as expected!

@mtgriego mtgriego merged commit a46e185 into master Mar 7, 2024
@mtgriego mtgriego deleted the imartin/MBL-1262 branch March 7, 2024 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OAuth 2.0 Tied to epic https://kickstarter.atlassian.net/browse/MBL-1108
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0