<div dir="ltr">The equivalent feature in Android launched a few weeks ago at I/O is Chrome Custom Tabs: <a href="https://developer.chrome.com/multidevice/android/customtabs" target="_blank">https://developer.chrome.com/multidevice/android/customtabs</a><br><div><br></div><div>So the exciting news is that both platforms will gain a kind of "Browser View" feature within about 3 months, and the reach will be very broad with most phones we care about being upgraded in short order.</div><div><br></div><div>Effectively you can do everything you could have done in the system browser – but now in a more captive in-app view making it much harder for the user to get lost, and using a more seamless transition (no more app flips). For those devices not yet upgraded, you can gracefully fall back to system browser or webview.</div><div><br></div><div>Importantly, canOpenURL is being severely curtailed in iOS 9 (max 50 unique URL schemes, must be specified at build time) which will limit or extinguish some things we were thinking of pre iOS 9, such as being able to detect native TAs by checking a long list of possible ones. For apps built pre iOS 9, running on iOS 9, the first 50 unique schemes called will succeed, and *all* subsequent ones will fail. WWDC talk <span style="text-decoration:underline;font-size:14.6666666666667px;font-family:Arial;vertical-align:baseline;white-space:pre-wrap;background-color:transparent"><a href="https://developer.apple.com/videos/wwdc/2015/?id=703" style="text-decoration:none">#703</a></span>, covers this (<a href="http://asciiwwdc.com/2015/sessions/703">ASCII version</a>).</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jun 15, 2015 at 6:08 AM, Mike Varley <span dir="ltr"><<a href="mailto:mike.varley@securekey.com" target="_blank">mike.varley@securekey.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">
Right - from what I understand the new tabs do everything the system browser does, and allows access to system browser state. But I only know what I saw from the keynote :)
<div><br>
</div>
<div>So improved UX, not only from a buttons and tabs perspective, but the user's state is now accessible from the system browsers as well. </div><span class="HOEnZb"><font color="#888888">
<div><br>
</div>
</font></span><div><span class="HOEnZb"><font color="#888888">MV</font></span><div><div class="h5"><br>
<div><br>
</div>
<div>
<div>
<div>On Jun 15, 2015, at 8:50 AM, Paul Madsen <<a href="mailto:paul.madsen@gmail.com" target="_blank">paul.madsen@gmail.com</a>> wrote:</div>
<br>
<blockquote type="cite">
<div text="#000000" bgcolor="#FFFFFF">hey Mike, if true, you are saying the new tabs can 'do everything the system browser does', so the only difference is UX<br>
<br>
Im not diminishing the importance of the UX , just want to understand what we gain<br>
<br>
<div>On 6/15/15 8:36 AM, Mike Varley wrote:<br>
</div>
<blockquote type="cite">
I seem to recall that both iOS and Android will now allow these embedded web views (i.e., chrome tabs and safari web views) full access to the user's settings: including cookies, stored passwords, local storage, (device certificates as John mentioned), touchID?
the works. And there is the improved UI experience as well, that you pointed out, with "back' buttons that automatically return the user to the calling App.
<div><br>
</div>
<div>MV<br>
<div><br>
</div>
<div><br>
</div>
<div> <br>
<div>
<div>On Jun 15, 2015, at 8:05 AM, Paul Madsen <<a href="mailto:paul.madsen@gmail.com" target="_blank">paul.madsen@gmail.com</a>> wrote:</div>
<br>
<blockquote type="cite">
<div text="#000000" bgcolor="#FFFFFF">John, can you expand on<br>
<br>
'However it seems like we will be able to do significantly more with the browser than we had been thinking.'<br>
<br>
As I see it, the new feature doesn't enable anything *more* other than a better UX on iOS? True?<br>
<br>
Paul<br>
<br>
<div>On 6/12/15 4:38 PM, John Bradley wrote:<br>
</div>
<blockquote type="cite">
Have a look at 23min into this video from ADC.<br>
<div>
<div>
<div><br>
</div>
<div><a href="https://developer.apple.com/videos/wwdc/2015/?id=504" style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">https://developer.apple.com/videos/wwdc/2015/?id=504</a></div>
</div>
</div>
<br>
<div>This is a significant development.</div>
<div><br>
</div>
<div>In talking to others from Google yesterday and today, they have introduced similar functionality in Android rolling out in approximately the same timeframe, and backwards compatible with current versions of Android.</div>
<div><br>
</div>
<div>Being able to invoke a web tab without an app flip is a significant change, potentially making the TA in the browser that we have talked about the preferred option on iOS.</div>
<div><br>
</div>
<div>People should look at the ACDC draft <a href="https://bitbucket.org/openid/napps/wiki/Home" target="_blank">https://bitbucket.org/openid/napps/wiki/Home</a>.</div>
<div><br>
</div>
<div>It may be that NAPPS for enterprise is OAuth using a tab plus PKCE and some additional app verification logic + fido api in the browser.</div>
<div>For SasS we may be able to use OAuth + ACDC and discovery in a tab.</div>
<div><br>
</div>
<div>It looks like the tab will have access to device certificates solving some peoples issues around that.</div>
<div><br>
</div>
<div>We should also be able to do <a href="http://accountchooser.com/" target="_blank">
accountchooser.com</a> in the browser tab to perform account discovery.</div>
<div><br>
</div>
<div>Now that the changes have landed on iOS and Android we should be good to do testing in the late summer fall.</div>
<div><br>
</div>
<div>Please start the discussion on the list.</div>
<div><br>
</div>
<div>I recognize that some people will still have use cases for native token agents, so I am not proposing completely eliminating that yet.</div>
<div><br>
</div>
<div>However it seems like we will be able to do significantly more with the browser than we had been thinking.</div>
<div><br>
</div>
<div>Regards</div>
<div>John B.</div>
<div><br>
</div>
<br>
<fieldset></fieldset> <br>
<pre>_______________________________________________
Openid-specs-native-apps mailing list
<a href="mailto:Openid-specs-native-apps@lists.openid.net" target="_blank">Openid-specs-native-apps@lists.openid.net</a>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-native-apps" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-native-apps</a>
</pre>
</blockquote>
<br>
</div>
_______________________________________________<br>
Openid-specs-native-apps mailing list<br>
<a href="mailto:Openid-specs-native-apps@lists.openid.net" target="_blank">Openid-specs-native-apps@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-native-apps" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-native-apps</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div></div></div>
</div>
<br>_______________________________________________<br>
Openid-specs-native-apps mailing list<br>
<a href="mailto:Openid-specs-native-apps@lists.openid.net">Openid-specs-native-apps@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-native-apps" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-native-apps</a><br>
<br></blockquote></div><br></div>