QR code reading error on android devices

[takusng]

Recently, when I try to read a QR code using the tiqr app on my android device, I get an error. The error message is as follows.

The app was opened from an invalid URL. The link which was used to open the appdoes not have a valid format. No action will be taken.

I think it is a problem with the android version of the tiqr app, as it reads fine in the iphone tiqr app.

I would appreciate it if you could tell me how to respond.

[phavekes]

Where are you trying to authenticate to?

[takusng]

I have a tiqr server set up on my university's authentication server.

I used the following site as a reference for my setup. https://meatwiki.nii.ac.jp/confluence/display/tiqr/Installing+Shibbolized+Tiqr

I have been able to enroll and authenticate without any problems, but recently I have been getting errors when reading QR codes.

It is not only me, but many of our university's users are experiencing the error.

[phavekes]

In the latest version of the app, the domainnames that are allowed so start authentication are limited.

https://github.com/Tiqr/tiqr-app-android/blob/492e36f7afde79cdcf8190b0a046caa0e9740117/app/build.gradle.kts#L51

[takusng]

Does this mean that once the University's domain is added to the configuration, the error will no longer occur?

If so, could you please add my university domain as well? We are promoting the use of tiqr as a university and would like to make it available.

[phavekes]

It will require a new app build, release and update. What's the domein name? You can also create a PR for adding this domainname

[takusng]

Thank you very much. Our domain name is "ku-sso.cis.kanazawa-u.ac.jp".

[phavekes]

Please join the test-track on Google Play to test authentication and enrollment before the new version is generally released:

https://play.google.com/apps/testing/org.tiqr.authenticator

[esearrose]

We are a French organization working for public benefit in the HealthCare sector and have been using Tiqr successfully until now for authentication on our servers. However, since Tiqr 4.x, connections on our servers (domains : securite-test.sante-na.fr, securite.sante-na.fr) do not work anymore.

Could you please add sante-na.fr to the allowed domains in the next release ?

Thanx

[phavekes]

The updated app is in the Google Play open test now. Could you test if it works for you?

[esearrose]

It works perfectly. Many thanks !

[tvdijen]

Please add overheid-i.nl to the list as well... I had a working environment until this blew up in my face

[pmeulen]

This is not a scalable way to do this for Tiqr IMO. Suddenly blocking new registrations and breaking authentication is not a nice way to find out about this for existing users of the Tiqr app.

We should roll back this change.

Edit: As discussed with @phavekes. We'll release a version of Tiqr without the whitelist ASAP. Sorry for the confusion!

[phavekes]

https://github.com/Tiqr/tiqr-app-android/pull/46

[phavekes]

A version of the Android-Tiqr app (4.0.13) allowing all domain-names is available for internal testers, and will soon be moved to production.