search

MicrosoftEdge / MSEdgeExplainers

Home for explainer documents originated by the Microsoft Edge team
Creative Commons Attribution 4.0 International
1.29k stars 205 forks source link

[Web Install] How does canInstall work for apps requiring login first? #662

Closed HowardWolosky closed 10 months ago

HowardWolosky commented 1 year ago

Sites like https://teams.microsoft.com (Microsoft Teams) and https://admin.google.com (Google Admin Center) automatically redirect to a login/authentication page before they ever serve out their web manifest. What is the plan around sites like these as it pertains to the installability check in canInstall() as well as the navigator.install() method itself?

In the case of the WebAppInstallForceList policy, a "placeholder" app gets installed for the target website until the user has successfully logged in. After that, the placeholder app is effectively uninstalled with the correct app installed. That works fine because WebAppInstallForceList doesn't do installability checks -- it just installs the requested app.

WebInstall on the other hand is very specifically intending to do installability checks, going even further to ensure that the installation origin has been granted permission to be an installer by the web app's manifest. What is the plan for dealing with websites where the manifest is behind authentication?

diekus commented 10 months ago

The installURL in the latest proposal should work around apps that require a login.