From 03ef74300bc7885fea6f9eb571586986aa99a136 Mon Sep 17 00:00:00 2001
From: Tony Giorgio <101225832+TonyGiorgio@users.noreply.github.com>
Date: Mon, 24 Nov 2025 14:39:30 -0600
Subject: [PATCH] fix(android): add explicit OAuth URLs to opener plugin
 permissions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Android release builds don't reliably respect wildcard https://* permissions
in the opener plugin. This causes OAuth flows to fail on physical devices
because the external browser won't open.

Added explicit URL permissions for:
- https://accounts.google.com/* (Google OAuth)
- https://oauth.github.com/* (GitHub OAuth)
- https://appleid.apple.com/* (Apple Sign In)

These explicit permissions ensure OAuth works on both debug builds (emulator)
and release builds (physical devices/production).

Tested on:
- Emulator: OAuth flows work ✓
- Physical device: OAuth flows work after fix ✓

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
---
 frontend/src-tauri/capabilities/mobile-android.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/frontend/src-tauri/capabilities/mobile-android.json b/frontend/src-tauri/capabilities/mobile-android.json
index 223abc712..4965df7d7 100644
--- a/frontend/src-tauri/capabilities/mobile-android.json
+++ b/frontend/src-tauri/capabilities/mobile-android.json
@@ -76,6 +76,15 @@
         {
           "url": "https://*.google.com/*"
         },
+        {
+          "url": "https://accounts.google.com/*"
+        },
+        {
+          "url": "https://oauth.github.com/*"
+        },
+        {
+          "url": "https://appleid.apple.com/*"
+        },
         {
           "url": "https://*"
         }