In-app browser or separate user agent?

[markphillips100]

It's not clear to me if this is using a user agent separate from the app on mobile. Is it using chrome tabs for example on Android, or using an in-app browser when communicating to the idp?

[markphillips100]

I guess I'm asking if this library is compliant with https://www.rfc-editor.org/rfc/rfc8252#section-8.12 in regards to use of "embedded" user agents?

It's important for me, aside from the security reasons laid out in the article, as I don't think I can achieve single sign-on across multiple apps (both mobile and web) from the same device if an embedded user agent is used. Correct me please if I am wrong.

[jhancock4d]

This uses webview right now with the intent to move to chrome tabs etc. However when I went to do it, the code in Android and iOS for creating separate OpenIdConnect windows was depreciated.

Very open to a PR.