Temporarily whitelist SSO URLs during signin?

[ThatOneCalculator]

I unfortunately have my OpenAI account locked to my Microsoft SSO. I'd love to use gptAssist, but I can't due to the SSO not working.

[woheller69]

I will not implement that. Maybe you can separate your account from Microsoft SSO

[ThatOneCalculator]

I tried contacting support, it's impossible to separate it :(

[woheller69]

you can try the unblocked version in #11

[woheller69]

or better: a new OpenAI account...

[ThatOneCalculator]

I would, but I pay for plus (I know, cringe) on my current account and have it linked for work stuff.

[ThatOneCalculator]

For now, the unblocked version works great :)

I'd love if eventually there could be a middle-ground version with trackers blocked but SSO URLs whitelisted

[woheller69]

I am thinking of a version that uses StevenBlack's host list https://github.com/StevenBlack/hosts for blocking But that is a lot of effort...

[woheller69]

Please try this. Via the button at the top right (visible only when scrolled to the top) blocking can be switched on/off

-Uninstall -Remove .zip and install

app-release.apk.zip

[ThatOneCalculator]

Works like a charm!

[ThatOneCalculator]

The only problem is that it covers the + button

[woheller69]

I know, but if you swipe up a bit, the button disappears and the "+" is back

[ThatOneCalculator]

Awesome! Maybe that could be shown in a toast.

[ThatOneCalculator]

Also, Bing search and image upload work as expected (except Bing search doesn't show favicons when surfing on sites, which is a good thing)

[Atephys]

I have tried this new implementation, as my account is tied to Google SSO and it still doesn't work for me, due to some Google's "use secure browsers" policy. Would you be able to fix that?

[woheller69]

Sorry, but I will not fix this for privacy reasons. This app only supports login with OpenAI account not tied to Google etc.

"Embedded webviews implementing or extending Android WebView do not comply with Google's secure browser policy for its OAuth 2.0 Authorization Endpoint"

https://developers.googleblog.com/2021/06/upcoming-security-changes-to-googles-oauth-2.0-authorization-endpoint.html

So changing that would not be an easy thing.

[woheller69]

Please try this. Just a little test where I modified the user agent in unblocked mode. Maybe that helps.

-Uninstall -Remove .zip and install

app-release.apk.zip

[Atephys]

Thank you for the update. I tried this and was able to log in successfully. I really appreciate your help.

[woheller69]

I am really impressed how "secure" Google's secure browser policy is. Just tell them you are not using WebView and they believe it. :-)))

[ThatOneCalculator]

I'd rather that be the case rather than Google adding more spyware "security features" to their browsers... 🥴

[woheller69]

let's hope it works in the same reliable manner for the upcoming Android WebView Media Integrity API

[ThatOneCalculator]

Closed by v1.30