# Known Bugs & Regressions

## Open

### [CAP-001] SSO UIA flow may hang in Capacitor WebView

**Severity**: Low  
**Component**: `src/app/components/uia-stages/SSOStage.tsx`, `src/app/components/ActionUIA.tsx`  
**Platform**: Android (Capacitor)

**Description**: `SSOStage` uses `window.open()` + `window.postMessage()` callback pattern for SSO re-authentication during UIA operations (password change, account deactivation, etc.). In Capacitor, the Browser plugin opens a separate process, and `postMessage` callback may not reach the WebView, causing the UIA flow to hang.

**Impact**: Only affects users whose homeserver requires SSO for UIA (not password). Vojo users authenticate via password, so UIA also uses password flow. Risk is low for current user base.

**Workaround**: None needed for password-authenticated users.  
**Fix options**: Remove `AuthType.Sso` from `SUPPORTED_IN_APP_UIA_STAGES` in `ActionUIA.tsx`, or rewrite SSO callback to use Capacitor App URL listener instead of `postMessage`.

---

## Resolved