1 KiB
Known Bugs & Regressions
Open
[CAP-001] SSO UIA flow may hang in Capacitor WebView
Severity: Low
Component: src/app/components/uia-stages/SSOStage.tsx, src/app/components/ActionUIA.tsx
Platform: Android (Capacitor)
Description: SSOStage uses window.open() + window.postMessage() callback pattern for SSO re-authentication during UIA operations (password change, account deactivation, etc.). In Capacitor, the Browser plugin opens a separate process, and postMessage callback may not reach the WebView, causing the UIA flow to hang.
Impact: Only affects users whose homeserver requires SSO for UIA (not password). Vojo users authenticate via password, so UIA also uses password flow. Risk is low for current user base.
Workaround: None needed for password-authenticated users.
Fix options: Remove AuthType.Sso from SUPPORTED_IN_APP_UIA_STAGES in ActionUIA.tsx, or rewrite SSO callback to use Capacitor App URL listener instead of postMessage.