Screenshot / recording protection

[station70-nazli]

Hi Auth0 team,

We're building a security-focused Android app and have applied FLAG_SECURE to prevent screenshots and screen recordings across the app. However, the Chrome Custom Tab launched by WebAuthProvider is not covered
since it runs in a separate process.

Would it be possible to expose an option in the Auth0 Android SDK to enable FLAG_SECURE for the login flow?

Thanks!

[pmathew92]

Hi @station70-nazli , Thanks for starting this discussion. We will evaluate the feasibility for this feature and get back to you

[pmathew92]

Hi @station70-nazli , FLAG_SECURE is a window level flag applied to the Activity that owns the Window object. Chrome custom tab runs inside the browsers process and the browser activity owns the window. Auth0 SDK has no way to set the window flags in this scenario. I am closing this discussion as it is not feasible currently. Please feel free to reopen if you have any further concersn