Google OAuth Webview

Google OAuth fails in some webviews (in-app browsers) and displays a 403 disallowed_useragent error message. This library detects whether the user is in a webview that is not supported by Google OAuth.

Installation

npm install google-oauth-webview

Usage

import {
  isWebviewUnsupportedByGoogleOAuth,
  getWebviewOwner,
  WebviewOwner,
} from "google-oauth-webview";

// Checks if the user agent is a user agent of a web view that is not supported by Google OAuth.
const isSupported: boolean = isWebviewUnsupportedByGoogleOAuth(
  navigator.userAgent
);

// When possible, determines the owner of the webview based on the user agent.
// If the user agent does not match a webview or the webview owner cannot be determined, returns null.
const webviewOwner: WebviewOwner = getWebviewOwner(navigator.userAgent);

Sponsor

Browsers and applications tested

Legend

• ✅ The application or browser has been tested and its user agent is present in the test.
• ❌ The application or browser has NOT been tested.

Browsers tested

| Browser | Mac OS | Windows | iOS | Android | | ---------------- | ------ | ------- | --- | ------- | | Chrome | ✅ | ✅ | ✅ | ✅ | | Firefox | ✅ | ✅ | ✅ | ✅ | | Edge | ❌ | ✅ | ❌ | ❌ | | Safari | ✅ | ❌ | ✅ | ❌ | | Samsung Internet | ❌ | ❌ | ❌ | ✅ | | Opera | ❌ | ❌ | ❌ | ❌ |

Applications tested

| Application | iOS | Android | Uses a webview | Google OAuth works in webview | | ------------------ | --- | ------- | -------------- | ----------------------------- | | WhatsApp | ✅ | ❌ | no | - | | ProtonMail | ✅ | ❌ | no | - | | Telegram | ✅ | ❌ | yes | yes | | Gmail | ✅ | ❌ | yes | yes | | Slack | ✅ | ❌ | yes | yes | | Facebook Messenger | ✅ | ❌ | yes | no | | X / Twitter | ✅ | ❌ | yes | yes | | LinkedIn | ✅ | ❌ | yes | no | | reddit | ✅ | ❌ | yes | yes | | YouTube | ✅ | ❌ | yes | yes  | | Discord | ✅ | ❌ | yes | yes | | Facebook App | ✅ | ❌ | yes | no |

Applications that still need to be tested

| Application | iOS | Android | | ----------- | --- | ------- | | Instagram | ❌ | ❌ | | TikTok | ❌ | ❌ | | Snapshat | ❌ | ❌ |

Contributing

1. Connect your cell phone to your local network (e.g. wifi).
2. Clone this repository and run npm run serve. This command will serve a web page on your local network, displaying the user agent. Copy the network URL displayed in the terminal.
3. Paste the URL into your application (for example, if you're testing a messaging application, you can send the URL to yourself as a message).
4. Click on the URL in your application and check whether the page is loaded in a web view or in the native browser. If the URL link doesn't work because it's an IP address, you can use the URL https://www.google.com/url?q=<your-local-URL> instead, which should do the trick.
5. Copy and paste the user agent displayed in the src/user-agents.ts file.
6. Test whether Google OAuth works in the webview. If not, update the library code and tests accordingly.
7. Complete the README.

Rules

• DO NOT copy and paste user agents found on forums, etc.
• DO NOT copy and paste user agents returned by ChatGPT or other artificial intelligence platforms.

We want accurate data that has been tested on real devices with real applications.

Supported Node and TypeScript versions

|  Node min versions | TS min version | | ------------------ | -------------- | | 20, 22 | 5.6 |