[iOS] Logout: I got asked permission to use "abcxyz.org" to login

[quantranhong1999]

Why

When I chose to logout, I got asked to use the site "abcxyz.org" to LOGIN.

ScreenRecording_11-27-2024.16-30-41_1.MP4

That sounds weird to me. Is there anything we can do to improve the iOS permission request for logout?

Env

Twake Mail iOS 0.14.1.

[hoangdat]

@dab246 , can we change the content of login to logout?

[hoangdat]

• we should change TMail to Twake Mail

[dab246]

@dab246 , can we change the content of login to logout?

We cannot change the login content of this dialog to logout.

• Because the message in the dialog above appears due to the way ASWebAuthenticationSession works when using OIDC (OpenID Connect) or OAuth 2.0. By default, the iOS system automatically displays this content based on the context of an authentication session, but the system does not distinguish clearly between login and logout because both are requests related to user sessions.
• But we can suppress this confirmation dialog, by setting preferEphemeralSession = true in EndSessionRequest when doing logout. It is also mentioned in the flutter_appauth documentation on pub.dev. It was also mentioned by Apple at the WWDC 2019 session. See the prefersEphemeralWebBrowserSession discussion in the documentation.

• we should change TMail to Twake Mail

• We can change it by changing the value of CFBundleName in Info.plist

[hoangdat]

• hide system's confirm dialog when logging out
• change bundle name of Twake Mail