All geek questions in one place

Does SFSafariViewController clear user data?

This blog post from Rizwan Sattar describes how to use the SFSafariViewController to enter a user into your application. He explains that this is possible because SFSafariViewController uses cookies with Safari.app. It seems to me that the developer will be able to determine which sites the user is registered on, thereby data leakage. I assume that you will need to pass the private key to the site so that it knows which URL scheme of the application to redirect to. It's true?

+4
source share
3 answers

SFSafariViewController does not pass user data - the application does not have access to web browsing, cookies, etc.

, , - , URL ( - ).

+4

Andrew M , SFSafariViewController ( , ..), , , . , , , , .

, , URI, sleaze://. , SFSafariViewController , , . , -URL , , .

, , -, , , ? , , . , "" , , , .

+1

I totally agree with Steve Moser. For example: if I use a couple of applications that are authenticated on the same server (in case of using SSO), now using SFSafariViewController you can transfer cookies and authenticate. But a rogue application sitting on the same device will also be able to access this cookie using SFSafariViewContorller and may get a valid session.

0
source

Source: https://habr.com/ru/post/1598090/

More articles:


All Articles