department-of-veterans-affairs / va-mobile-app

"If VA were a company, it would have a flagship mobile app."
https://department-of-veterans-affairs.github.io/va-mobile-app/
17 stars 2 forks source link

BUG - sev-3 - Android - SSO occasionally flaky; cannot pin down #9832

Open TKDickson opened 1 month ago

TKDickson commented 1 month ago

What happened?

In Android only, there have been intermittent, but not consistent, issues with SSO-enabled webviews. The most common one I've seen is:

Often but not always, the very first time someone logs in on a fresh app install and attempts to open an SSO-webview, they will not be logged in. Of the times when it happens, if they close and reopen the webview, 95% of the time they are logged into the webview. (like this video). Very VERY occasionally, I've reopened the webview multiple times without getting logged in, and needed to log out and back in again in order to get the SSO stuff to work.

Much less often (think 'rarely'), on NOT a fresh install of the app, I have had the same issue with SSO not working, then reopen the webview and it works, on a username/password login to the app. I've only seen this.... maybe twice, and both of those times reopening the webview within the same login session worked (unlike the prior paragraph where I have been 'locked out' of SSO)

Ultimately, I'm seeing these issues less than 10% of the time (roughly) with Android, and often they have an easy 'fix'/workaround, so marking as sev-3.

Specs:

Steps to Reproduce

Desired behavior

SSO should always work on first webview open attempt

Acceptance Criteria

Bug Severity - BE SURE TO ADD THE SEVERITY LABEL

See [Bug Tracking](https://department-of-veterans-affairs.github.io/va-mobile-app/docs/QA#issue-severity) for details on severity levels

Linked to Story

Screen shot(s) and additional information

Full JSON response for services related to issue (expand/collapse)

Ticket Checklist

TKDickson commented 1 month ago

Found while testing & caused by #9286. Does not hold up release of that ticket (especially in a defaulted-off state)