fix: Update URL construction for Android instant app redirection #44
Conversation
Signed-off-by: kryptocodes <[email protected]>
WalkthroughThe update changes the way the Changes
Sequence Diagram(s)sequenceDiagram
participant User
participant ReclaimProofRequest
participant AndroidApp
User->>ReclaimProofRequest: Triggers redirectToInstantApp()
ReclaimProofRequest->>ReclaimProofRequest: Encode template data
ReclaimProofRequest->>ReclaimProofRequest: Construct HTTPS URL
ReclaimProofRequest->>ReclaimProofRequest: Embed HTTPS URL in intent URI
ReclaimProofRequest->>User: Redirects to intent URI
User->>AndroidApp: Android handles intent URI, launches app
Estimated code review effort🎯 2 (Simple) | ⏱️ ~7 minutes Poem
Warning There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure. 🔧 ast-grep (0.38.6)src/Reclaim.ts[ ... [truncated 12152 characters] ... illa.org/en-US/docs/Web/API/Window/postMessage\n - https://cwe.mitre.org/data/definitions/923.html", Note 🔌 MCP (Model Context Protocol) integration is now available in Early Access!Pro users can now connect to remote MCP servers under the Integrations page to get reviews and chat conversations that understand additional development context. 📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (1)
🚧 Files skipped from review as they are similar to previous changes (1)
✨ Finishing Touches
🧪 Generate unit tests
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
kryptocodes
changed the title
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🔭 Outside diff range comments (1)
src/Reclaim.ts (1)
735-739: Avoid logging full redirect URL (PII leakage risk)
instantAppUrlembeds JSON template (context, parameters, etc.). Logging it can leak PII. Log minimal context instead.- logger.info('Redirecting to Android instant app: ' + instantAppUrl); + logger.info(`Redirecting to Android instant app (sessionId=${this.sessionId})`);
🧹 Nitpick comments (1)
src/Reclaim.ts (1)
737-739: Optional: use replace() to avoid back-navigation and consider canonical intent fallback
- Using
window.location.replaceprevents users from landing back on the intermediate page via back button.- For broader compatibility, consider an intent URI that uses
S.browser_fallback_url(encoded) instead of query params to Play. This is a common, well-supported pattern.- window.location.href = instantAppUrl; + window.location.replace(instantAppUrl);Example alternative intent format (for future refactor):
intent://<host><path>?<q>#Intent;scheme=https;S.browser_fallback_url=<encoded_play_store_url>;end;
Signed-off-by: kryptocodes <[email protected]>
kryptocodes
changed the title
Description
Fixed Android instant app redirect to use proper intent scheme for redirection. The previous implementation used a direct URL to the web verification page, but this change wraps it in an Android intent that will redirect users to instant app (also remove the open in browser app)
Testing (ignore for documentation update)
Type of change
Checklist:
Additional Notes:
If the device doesn't support instant app it will redirect to the playstore
Summary by CodeRabbit